OWASP GenAI Security Project Releases 2026 Top 10 for LLM Applications, Debuts Agent Control Standard and New Resources for Securing Generative and Agentic AI

F5, WitnessAI, Evoke Security and Mondoo Inc. join as new sponsors as community expands AI
security solutions guidance and surpasses 30,000 members

WILMINGTON, Del., Sept. 2, 2026 /PRNewswire/ -- The OWASP GenAI Security Project, a global open-source community dedicated to advancing the security of generative AI and agentic systems, today announced a major expansion of its security resources, including the 2026 Top 10 for LLM Applications, a new Agent Control Standard for securing agentic AI systems, and expanded AI security solutions guidance. The resources coincide with the project surpassing 30,000 members worldwide and welcoming four new industry sponsors.

The OWASP GenAI Security Project's Top 10 for LLM Applications 2026 is the latest edition of the project's flagship guidance for identifying and mitigating the most critical security risks facing applications powered by large language models. The new edition surpassed 10,000 downloads within its first 48 hours, demonstrating the continued demand for practical, community-developed guidance as organizations move AI applications from experimentation into production.

The 2026 edition was developed with contributions from hundreds of AI security experts and incorporates updated rankings, expanded threat coverage and research drawn from thousands of real-world AI security incidents. It also expands mappings to other leading frameworks, including NIST, MITRE ATLAS, CWE and the OWASP GenAI Security Project's Top 10 for Agentic Applications.

The OWASP GenAI LLM Top 10 2026 is available for download at https://genai.owasp.org/resource/owasp-genai-llm-top-10-2026/

The project also welcomed additional industry sponsors supporting its open-source research and community programs. New Gold Sponsors are F5 and WitnessAI. New Silver Sponsors are Evoke Security and Mondoo Inc.

Other key announcements include:

• The project also unveiled its expanded AI Security Solutions Directory, an interactive resource that provides multiple lenses for understanding the rapidly evolving AI security market, including Generative AI Security, Agentic Security, and AI and Agentic Red Teaming.
• The Agent Control Standard (ACS) has been donated to the OWASP GenAI Security Project. The addition of ACS complements the project's existing work on agentic AI risks, security controls, identity, governance and testing by extending that guidance toward practical runtime enforcement.
• The project also highlighted the new GenAI Security Industry Framework Crosswalk, an open resource designed to help organizations connect OWASP GenAI security guidance with established security, risk and compliance frameworks.
• The project has now surpassed 30,000 members on LinkedIn, bringing together security practitioners, AI developers, researchers, technology providers, government participants and other contributors from around the world.

Scott Clinton, chair and co-founder, OWASP GenAI Security Project, said: "Generative AI security has moved incredibly quickly from an emerging concern to an operational priority. What we saw at Black Hat and DEF CON this summer reinforces the need for open, practical guidance that security teams, developers and AI practitioners can put to work today. The growth of the project – and the breadth of contributions coming from across the industry – reflect how important community-driven standards and resources have become as AI and autonomous agents move into production."

Steve Wilson, Top 10 for LLM founder and board member at OWASP GenAI Security project, and chief AI and product officer at Exabeam, said: "The 2025 Top 10 captured what practitioners were seeing as generative AI rapidly moved into the enterprise. In 2026, we've taken an important step forward, testing that community expertise against thousands of real-world incidents and using the evidence to sharpen how we prioritize risk. It also points to an important evolution ahead: AI is moving from models that generate content to agents that can act autonomously. Security must evolve with it—assuming AI will sometimes fail or be fooled and putting enforceable controls around what these systems can access, decide and do."

Read the blog to hear what our new sponsors have to say about the project. 

About OWASP

The Open Worldwide Application Security Project (OWASP) is an online community that produces freely available articles, methodologies, documentation, tools and technologies in the fields of IoT, system software and web application security. Led by a non-profit called The OWASP Foundation, the OWASP provides free and open resources. The OWASP Top 10 - 2021 is the published result of recent research based on comprehensive data compiled from over 40 partner organizations. The OWASP Foundation, a 501(c)(3) non-profit organization in the U.S. established in 2004 in the U.S., supports the OWASP infrastructure and projects.

Media Contact

Jeff Alexander

Force4 Technology Communications 

[email protected] 

SOURCE OWASP