CSA/OWASP Agentic AI Red Teaming Guide
Comprehensive red teaming guide for agentic AI systems covering 12 threat categories with actionable test procedures, example prompts, and deliverables. CSA and OWASP AI Exchange joint publication.
What it does
Joint publication from CSA AI Organizational Responsibilities Working Group and OWASP AI Exchange. Provides detailed red teaming procedures for agentic AI across 12 threat categories: Authorization & Control Hijacking, Checker-Out-of-the-Loop, Critical System Interaction, Goal & Instruction Manipulation, Hallucination Exploitation, Impact Chain & Blast Radius, Knowledge Base Poisoning, Memory & Context Manipulation, Multi-Agent Exploitation, Resource Exhaustion, Supply Chain Attacks, and Untraceability. Each category includes test requirements, actionable steps, and example prompts.
Security relevance
Goes deeper than the OWASP Agentic Top 10 by providing specific test procedures for each threat. Covers MCP server hijacking, permission escalation, role inheritance exploitation, cross-session data leakage, memory poisoning, confused deputy attacks, feedback loop exploitation, and forensic analysis obfuscation. Also references tools: MAESTRO, AgentDojo, AgentFence, Promptfoo, and Agent Security Bench.
When to use it
Use as a hands-on testing playbook when red teaming agentic AI systems. The 12 categories provide a systematic structure for comprehensive agent security assessment.
OWASP coverage
Risks addressed — mapped to both OWASP Top 10 standards. 0 in LLM, 10 in Agentic.
The raw record
What Yuntona stores. Single source of truth — fork it on GitHub.
name: CSA/OWASP Agentic AI Red Teaming Guide slug: csa-owasp-agentic-ai-red-teaming-guide type: Agentic category: Education & Research url: https://cloudsecurityalliance.org/research/working-groups/ai-organizational-responsibilities reviewed: 2026-04 added: 2026-04 updated: 2026-04 risks: llm: [] asi: [ASI01, ASI02, ASI03, ASI04, ASI05, ASI06, ASI07, ASI08, ASI09, ASI10] complexity: Plug & Play pricing: — audience: AppSec · Red Team lifecycle: [test] tags: [Agentic, CSA, Free, Guide, OWASP, Red Teaming, Threat Model]