Skip to main content
Colorado ADMT: 1 Jan 2027 · EU high-risk: 2 Dec 2027 (Annex III); 2 Aug 2028 (Annex I)

Estimated time: ~4 minutes · 12 questions · 6 control domains

OWASP Agentic AI Security Readiness Assessment

A focused 12-question executive screen translating the OWASP Agentic Top 10 into practical governance, security, and assurance checks for real-world agent deployments.

In-browser processing
No account required
No login required
OWASP Agentic Top 10ASI01-ASI10Least-AgencyMCP and Tool Security

Browser-based assessment. This assessment calculates results in your browser without account creation. The page loads fonts from Google Fonts. Avoid entering confidential information into any free-text field.

Live Assessment Dashboard
Score
0/36
Answered
0/12
Posture
Not assessed
Gaps Found
0

Assessment Complete

0/36

Control Gaps

Questions scored No or Partly, lowest answer score first. Equal scores follow question order; this is not an impact ranking.

Domain Breakdown

Move from OWASP diagnosis to an ISO/NIST-mapped control path

Use this screen to identify gaps in goal integrity, tool use, identity, supply chain, containment and observability. ACT includes an agent incident containment and recovery runbook. Your team must test the actual stop procedure, downstream effects and restart conditions.

Data sovereignty confirmation. This assessment ran entirely in your browser. Your answers never left your device. We did not transmit, sync, or store a single byte of your responses. Once you close this page, all data is gone.

Frequently Asked Questions (FAQs)

Who is this for?

This screen is for security leaders, platform teams, architects, and governance owners responsible for agentic AI, MCP servers, AI tools, and connected automations.

What does it cover?

It covers the OWASP Agentic Top 10 control themes in practical terms: goal integrity, tool misuse, identity, supply chain, code execution, inter-agent trust, cascading failure, rogue behavior, and observability.

When should I use the broader agentic pages?

Use the broader Move78 agentic pages when you want a more governance-led view. Use this OWASP screen when you want a sharper security diagnostic tied directly to the OWASP risk families.

Does this store my answers?

No. Everything runs locally in your browser. Move78 does not transmit, sync, or store your responses.

Source review dates are stated in the relevant guides. It provides operational implementation guidance and product information only; it is not legal advice, tax advice, audit assurance, certification assurance, conformity-assessment advice, buyer-approval assurance, or security assurance. Validate legal, regulatory, contractual, tax, audit, and security decisions with qualified professionals.