Standards
OWASP Top 10 for Agentic Applications 2026 (ASI06 Memory & Context Poisoning)
De-facto security baseline for memory.
Specification
What it is
De-facto security baseline for memory.
At a glance
- Business model
- Specification
- Governing body
- OWASP GenAI Security Project (de facto, non-SDO)
- Maturity
- Published Dec 2025
- What it says about memory
- Risk taxonomy — the most-cited normative reference for what memory must defend (memory & context poisoning is ASI06).
- Artifacts
- Published on genai.owasp.org (no public GitHub repo; the old www-project repo returns 404)
Links and sources
- Official sitegenai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026
- Sourcegenai.owasp.org/initiatives/agentic-security-initiative
Facts verified nov 10, 2026. Vendor facts come from the vendor’s own pages; benchmark claims are self-reported unless we say otherwise.