05 — frameworks & standards

OWASP LLM Top 10

OWASP's list of the ten most critical risks in applications built on large language models — LLM01 Prompt Injection, LLM02 Sensitive Information Disclosure, LLM06 Excessive Agency and the rest. It is the vocabulary most security teams already share, so it is usually where an agent-security conversation starts even though it was written for LLM applications generally rather than for tool-using agents specifically.

Related terms

OWASP Agentic Top 10 Frameworks & standards
OWASP's first risk taxonomy written specifically for autonomous, tool-using agents: ASI01 Agent Goal Hijack, ASI02 Tool Misuse & Exploitation, ASI03…

Frameworks & standards

What auditors, buyers and regulators reference. See the compliance crosswalk for the control-by-control mapping.

OWASP LLM Top 10 is term 2 of 8 in this part of the glossary.

AMTSOOWASP LLM Top 10OWASP Agentic Top 10 MITRE ATLAS EU AI Act ISO/IEC 42001 NIST AI RMF AIUC-1

This page is one entry from the agentic AI security glossary, which defines 60 terms in the same style. Where a term belongs to a published taxonomy or standard — the HackAgent attack families, the OWASP lists, AMTSO's guidelines, MITRE ATLAS, ISO/IEC 42001, the NIST AI RMF, the EU AI Act — the authoritative wording is the source document's, not ours, and specifics should be verified there. "Lethal trifecta" is Simon Willison's term. OWASP® is a trademark of the OWASP Foundation; ATT&CK® and ATLAS™ are trademarks of The MITRE Corporation. Naming a framework here is description, not a claim of certification or endorsement.