Community blog

Community Spotlight: Mapping OWASP Risks with Praxen

Our community member Steve Wilson just published his latest findings, using Praxen to analyze 12 open-source agent projects against both the OWASP Top 10 for LLM Applications and the OWASP Agentic AI risk framework.

Across 114 findings, nearly half — 46 — spanned both frameworks, with the strongest overlap between Excessive Agency (the most common LLM-side finding) and Unexpected Code Execution (the most common agentic-side finding). His takeaway: the two taxonomies describe different layers of the same failures — the LLM framework catches model-level weaknesses, the agentic framework catches what happens when those weaknesses turn into real operational consequences — and real-world security failures often chain across both.

Check it out: When OWASP LLM Risks Meet Agentic Risks