OWASP AI and Agent Security Cheat Sheets
Official docs outline
6 sections- AI Agent Security
Tool permissions, sandboxing and human approval for agents.
- MCP Security
Model Context Protocol server trust, tool poisoning and auth.
- LLM Prompt Injection Prevention
Input and output controls for prompt injection.
- RAG Security
Access control and poisoning risks in retrieval pipelines.
- Secure AI Model Ops
Securing model deployment and operations.
- Secure Coding with AI
Reviewing and securing AI-generated code.
Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.
More in OWASP
All 33- OWASP API Security Top 10 (2023)
- OWASP ASVS
- OWASP Authentication Cheat Sheets
- OWASP Authorization Cheat Sheets
- OWASP CI/CD and Supply Chain Cheat Sheets
- OWASP Cryptographic Storage Cheat Sheets
- OWASP CSRF Prevention Cheat Sheet
-
OWASP Dependency-Check
- OWASP Deserialization Cheat Sheet
- OWASP Django Security Cheat Sheets
- OWASP Docker Security Cheat Sheet
- OWASP File Upload Cheat Sheet