OWASP Launches Agentic AI Security Maturity Framework

The Open Worldwide Application Security Project, known as OWASP, has launched a new framework for agentic AI security. This framework helps organizations manage the advanced AI systems they are using. It appears in the OWASP GenAI Security Project’s latest paper, published on June 3rd. The framework is a practical decision tool, not just a list of rules. Ariel Fogel, an AI security researcher, introduced it at Infosecurity Europe. The new guidance is called the ‘Enterprise Adoption Maturity Model.’ Fogel notes that organizations are deploying AI agents faster than they can govern them. The framework addresses this by mapping governance across two dimensions. One dimension covers what is being deployed, from shadow AI to custom multi-agent systems. It defines six levels of agentic AI adoption. The other dimension measures governance maturity, from ad hoc processes to continuous monitoring. It defines four levels of maturity. This matters because it helps businesses secure and manage their increasingly complex AI deployments.