OWASP LLM Top 10

Cranium AI platform interaction inspection is positioned to detect adversarial prompt-injection patterns in runtime workflows.

Prompt-injection pattern inspection aligns with OWASP prompt-injection risk context.

Amazon Bedrock Guardrails applies inline controls that can block prompt-injection and jailbreak-style requests before model outputs are returned.

Blocking prompt-injection and jailbreak requests aligns with OWASP prompt-injection risk mitigation context.

F5 AI Guardrails applies inline policy controls that can block prompt-injection payloads before requests reach downstream models and tools.

Blocking prompt-injection payloads aligns with OWASP prompt-injection mitigation context.

Cato AI Security runtime monitoring detects prompt-injection patterns and policy-violating AI prompt activity.

Detection of prompt-injection patterns aligns with OWASP prompt-injection risk context.

AI Agent Security helps detect prompt attacks, indirect injection, and sensitive data exposure across agent prompts, responses, and tool use.

Detection of prompt and indirect injection behavior aligns with prompt-injection risk mitigation context.

AI Runtime Protection provides runtime guardrails for prompt and response threat mitigation.

Runtime guardrails for prompt threat mitigation align to prompt-injection risk context.

Model Armor scans prompts and responses for prompt injection and jailbreak content and can return a block verdict when a violation is detected.

AuditaAI assessment: prompt and jailbreak inspection with a block verdict addresses the documented prompt-injection risk.

Glow continuous endpoint monitoring can detect suspicious AI interaction patterns and prompt-driven misuse across local applications and browser activity.

Detection of prompt-driven misuse patterns aligns with OWASP prompt-injection risk context.

Lasso runtime enforcement can block prompt-injection attempts and prevent unsafe autonomous agent actions or unauthorized tool invocation.

Inline blocking of prompt-injection attempts aligns with OWASP prompt-injection mitigation context.

Runtime guardrails are applied to block prompt injection attack paths before harmful model behavior propagates.

Blocking prompt-injection attack paths aligns with OWASP prompt-injection mitigation context.

Azure AI Content Safety and Prompt Shields identify direct and indirect prompt injection and related unsafe prompt patterns before they reach downstream model behavior.

The source explicitly addresses direct and indirect prompt injection defense behavior.

AI Agent Security uses hook-level interception and tool-call governance to constrain unsafe autonomous actions before execution.

Interception of prompt-driven tool-action chains can mitigate prompt-injection-induced execution abuse.

Prisma AIRS applies real-time safeguards to AI prompts, responses, model interactions, agent actions, and data exposure paths.

AuditaAI assessment: real-time safeguards for prompts and model interactions address prompt-injection risk.

Prompt Security runtime enforcement can block prompt-injection attempts in employee and application AI interaction paths.

Runtime blocking of prompt-injection attempts aligns with OWASP prompt-injection risk mitigation context.

Cortex AI Guardrails evaluate runtime prompts and responses to mitigate direct and indirect prompt-injection and jailbreak attempts.

Documented runtime guardrails for direct and indirect prompt injection align with OWASP LLM01 context.

Zenity runtime boundaries can block unsafe agent actions, including risky tool usage and unauthorized task execution.

Runtime prevention of harmful agent decisions can mitigate prompt-driven abuse effects in execution paths.

Zscaler AI Security runtime protection blocks prompt injection, data poisoning, and malicious URLs in AI interactions.

AuditaAI assessment: runtime blocking of documented prompt injection addresses the prompt-injection risk.

Model Armor can inspect, transform, tokenize, and redact sensitive elements in AI prompts and responses through Sensitive Data Protection integration.

AuditaAI assessment: inspecting, tokenizing, and redacting sensitive prompt and response content addresses sensitive-information disclosure risk.

AI Runtime Security can detect, block, or redact unsafe actions and sensitive information according to policy and platform capabilities.

Blocking or redacting sensitive information at runtime is aligned to sensitive-information disclosure context.

Prisma AIRS applies real-time safeguards to AI prompts, responses, model interactions, agent actions, and data exposure paths.

AuditaAI assessment: runtime safeguards across data-exposure paths address sensitive-information disclosure risk.

Portkey automatically redacts sensitive data from requests before sending them to an LLM.

AuditaAI assessment: redacting sensitive data before an LLM request addresses sensitive-information disclosure risk.

Zscaler Data Security inspects AI usage and prompts and can block risky access or enforce prompt DLP to prevent data loss.

AuditaAI assessment: prompt DLP and access blocking address sensitive information disclosure through AI usage.

Chainguard AI Security documents software supply chain coverage across SDLC phases, including trusted dependencies, CI/CD integrity, and hardened runtime foundations.

Securing dependencies and CI/CD integrity across AI SDLC phases aligns with software supply-chain risk mitigation.

Chainguard Containers is positioned as a built-from-source container catalog designed to minimize known vulnerabilities in development and production pipelines.

Built-from-source container artifacts positioned to reduce vulnerability exposure align to supply-chain risk mitigation context.

Wiz AI-BOM continuously inventories AI models, datasets, frameworks, software dependencies, identities, access paths, and infrastructure.

AuditaAI assessment: a continuously maintained inventory of models, datasets, frameworks, and dependencies supports identifying LLM supply-chain exposure.

AI Supply Chain Security analyzes model architectures, layers, weights, and artifacts for tampering or anomalies and tracks model lineage, origin, and licensing.

Inspecting model artifacts and lineage for tampering aligns to supply-chain risk context.

Prisma AIRS scans third-party models for tampering, malicious scripts, and deserialization risks.

AuditaAI assessment: scanning third-party models for tampering and malicious artifacts addresses LLM supply-chain risk.

Koi AES evaluates code differences and behavioral shifts in real time to identify software supply-chain risk.

AuditaAI assessment: identifying supply-chain shifts in software and AI model environments supports addressing supply-chain risk.

Zscaler AI Security runtime protection blocks prompt injection, data poisoning, and malicious URLs in AI interactions.

AuditaAI assessment: runtime blocking of documented data-poisoning attempts addresses data and model poisoning risk.

Check Point AI Security documents runtime enforcement that includes protection against harmful outputs in AI interactions.

Documented runtime protection against harmful outputs aligns with improper-output-handling risk mitigation context.

Cranium AI platform is positioned with runtime policy controls to govern unsafe autonomous agent behavior and over-permissioned execution paths.

Controls over unsafe autonomous execution align with OWASP excessive-agency risk mitigation context.

Cranium AI platform data controls are positioned to prevent sensitive information disclosure across model and agent workflows.

Preventing sensitive information disclosure in model and agent workflows aligns with OWASP sensitive-disclosure context.

Tenable One AI Exposure surfaces identity and entitlement risk for AI workloads, including over-permissioned access paths that can increase autonomous abuse risk.

Over-permissioned AI access paths align with excessive-agency risk mitigation context.

Amazon Bedrock Guardrails includes sensitive-information policy controls to reduce protected-data leakage in prompt and response flows.

Sensitive-information protections in prompt and response channels align with OWASP sensitive-disclosure risk context.

F5 AI Guardrails inspects prompts and responses to redact or block sensitive data and reduce leakage to external AI systems.

Prompt and response sensitive-data protections align with OWASP sensitive-disclosure mitigation context.

F5 AI Guardrails applies agent-focused runtime controls to constrain unsafe autonomous actions and high-risk tool execution paths.

Controls over high-risk autonomous execution paths align with OWASP excessive-agency risk mitigation context.

Cato AI Security applies inline controls to block sensitive data exfiltration to unauthorized AI services and channels.

Blocking sensitive data transfer in AI interactions aligns with OWASP sensitive-disclosure risk mitigation context.

Cato AI Security governance controls constrain unsafe autonomous actions and high-risk tool usage for AI agents and applications.

Controls over unsafe autonomous actions and tool usage align with OWASP excessive-agency risk context.

AI Agent Security governs which tools and MCP servers agents can use, and evaluates agent actions in context to help block unsafe or unauthorized behavior at runtime.

Runtime controls over agent actions and tool use align with excessive-agency risk mitigation context.

Glow endpoint controls can prevent sensitive information exposure through AI-enabled tools and unmanaged local workflows.

Preventing sensitive information exposure in AI-enabled workflows aligns with OWASP sensitive-disclosure risk context.

HiddenLayer presents Agentic and MCP Security as a use case for protecting autonomous agents and MCP-based systems from prompt injection, unsafe tool use, and harmful autonomous actions.

Protection from unsafe autonomous actions and tool use aligns to excessive-agency risk context.

Runtime response workflows support containment and remediation for unsafe agent behavior and unauthorized action chains.

Containing unsafe autonomous action chains aligns with excessive-agency risk mitigation context.

Microsoft Purview for AI applies DLP and sensitivity controls to reduce unauthorized sensitive data transfer in AI interactions.

DLP and sensitivity control behavior aligns with sensitive information disclosure risk mitigation context.

Neo Security Platform is positioned to prevent agentic threats by controlling unsafe runtime action paths and over-permissioned execution conditions.

Controls over over-permissioned agentic execution align with excessive-agency risk mitigation context.

AI Application DLP applies pre-submission filtering and policy controls to block sensitive prompt, upload, and clipboard data before transfer to AI providers.

Pre-submission blocking of sensitive prompts and uploads aligns with sensitive-information disclosure risk mitigation context.

Prisma AIRS verifies agent identity and enforces real-time security controls for agent actions.

AuditaAI assessment: verifying agent identity and enforcing controls on agent actions addresses excessive agency risk.

Koi AES enforces endpoint guardrails that approve, flag, or block autonomous tools.

AuditaAI assessment: approving, flagging, or blocking autonomous tools supports limiting excessive agent agency.

Prompt Security prompt and content controls redact sensitive enterprise data before it is sent to external models.

Prompt data redaction controls align with OWASP sensitive-disclosure mitigation context.

Prompt Security agent-focused governance restricts risky autonomous tool use and unsafe execution decisions.

Agent governance over risky autonomous actions aligns with OWASP excessive-agency mitigation context.

Cortex AI Gateway records both agent identity and human delegator context for task-scoped attribution and governance workflows.

Task-scoped delegated control and agent identity attribution mitigate excessive autonomous agency risk patterns.

Zenity identity-aware runtime boundaries can prevent sensitive data access and exposure by over-permissioned agents.

Preventing over-permissioned agent access to sensitive data aligns with OWASP sensitive-disclosure mitigation context.

Cortex AI Gateway provides centralized token and API-consumption visibility with spend governance controls to reduce runaway enterprise AI usage.

Spend limits and centralized usage governance align with controls for unbounded consumption risk.