OWASP Agentic AI · Threats & Mitigationsv1.1 · Dec 2025
CC BY-SA 4.0. Threat IDs, names, and definitions reproduced and adapted.
upstream ↗ATTRIBUTION · LICENSING
Sources
The upstream frameworks, standards, and guides Helmwart draws on, and the terms each one comes under.
Helmwart is an interpretive layer over published work. Everything the catalog draws on is listed below with the licence or terms it carries.
Upstream sources
OWASP Top 10 for Agentic Applications 2026v2026 · Dec 2025
CC BY-SA 4.0. ASI entries reproduced and adapted.
upstream ↗OWASP MAS Guide applying CSA MAESTROv1.0 · Apr 2025
CC BY-SA 4.0. Layer model and MAS scenario entries reproduced and adapted.
upstream ↗OWASP Top 10 for LLM Applications 2025v2025 · published 2024
CC BY-SA 4.0. LLM entry titles reproduced for cross-reference.
upstream ↗OWASP AI Exchange: General Controlsliving document
OWASP Foundation. Cited by control ID. No text reproduced.
upstream ↗NIST SP 800-207: Zero Trust Architecturev1.0 · Aug 2020
US Government work, public domain. Cited, not reproduced.
upstream ↗NIST AI 100-1: AI Risk Management Framework 1.0v1.0 · Jan 2023
US Government work, public domain. Cited, not reproduced.
upstream ↗NIST AI 600-1: Generative AI Risk Profilev1.0 · Jul 2024
US Government work, public domain. Cited, not reproduced.
upstream ↗NSA / CISA / Five Eyes: Careful Adoption of Agentic AI ServicesApr 2026
US Government work, public domain. Cited, not reproduced.
upstream ↗Red Hat: Zero Trust for Autonomous Agentic AI SystemsFeb 2026
© Red Hat, Inc. Cited, not reproduced.
upstream ↗MITRE ATLASv5.6.0 · living KB
MITRE ATT&CK Terms of Use. Technique names reproduced with the required MITRE notice.
upstream ↗Licensing and attribution
Threat entries, agentic factors, and MAESTRO layer descriptions are derived from OWASP material and stay under the upstream licence, CC BY-SA 4.0. Changes are marked on the entries that carry them. Where the MAS Guide reuses T16 and T17 for RPA-specific variants, Helmwart renumbers those entries to T48 and T49 so every ID on this site resolves to one threat. The engine, CLI, mitigation catalog, and application are proprietary. Full terms: Terms.
© 2026 The MITRE Corporation. MITRE ATLAS content is reproduced and distributed with the permission of The MITRE Corporation.
OWASP, MITRE ATLAS, and ATT&CK are trademarks of their respective owners. No endorsement is implied.
Helmwart is not a substitute for security review. It enumerates the threats that plausibly apply to an architecture; confirming them is still a reviewer's job.