#Policy As Code — Kunal Ganglani

an open laptop computer sitting on top of a table

How to Implement OWASP Agentic Top 10 Controls

A control-by-control guide to OWASP agentic top 10 controls: where to gate tool calls (MCP/client/server), what to log, what to block, and what belongs in CI vs runtime.

Keep exploring

Close to this topic, not on this page.

AI Agent Memory Exfiltration: Kill Chain + 5-Step Hardening A proof-of-concept showed Claude's memory could be silently exfiltrated to an attacker's server with no user warning. 15 min read
AI Agent Threat Model: 7 Attack Vectors Mapped to OWASP Prompt injection is just vector #1. 16 min read
AI Agent Attack Surface Map and Security Checklist The first developer-friendly attack surface map combining OWASP's Top 10 for Agentic Applications, Cisco's MemoryTrap disclosure, and June… 15 min read