Notes on agent security

Findings, measurements and design notes from building ASIScan. RSS.

• The OWASP Top 10 for Agentic Applications, explained for engineers

  The OWASP Top 10 for Agentic Applications, walked category by category: what each one looks like in code and what static analysis can and can't see.

  2026-09-22

• ASI09: the approval dialog your agent wrote for itself

  If a model composes the text of your confirmation prompt, the human is approving a description, not an action. How that gap opens and how to close it.

  2026-08-14