Agentic AI Security: OWASP Agentic Top 10, MCP, NIST and A2A

About this course

This course contains the use of artificial intelligence.

AI agents no longer just answer questions. They read your email, query your systems, call tools and submit transactions, often without a human approving each step. The security controls most organizations rely on were built for request-response applications, and they only partly hold when software plans and acts on its own. This course shows you how to secure, monitor and govern AI agents in a real enterprise, with hands-on labs you run yourself.

Learn agentic AI security the way it is practised: threat model, defend, detect, respond and govern, using the OWASP Top 10 for Agentic Applications.

Threat model an AI agent and score its risks with OWASP AIVSS and a four-level autonomy scale

Defend against goal hijack, indirect prompt injection and human-agent trust exploitation

Control tool use, code execution and irreversible actions with an enforceable tool policy

Secure the Model Context Protocol (MCP) and Agent2Agent (A2A) communication

Govern agents as non-human identities with least privilege and Microsoft Entra Agent IDDetect agent attacks in your SIEM, respond to incidents and map controls to NIST AI RMF, ISO/IEC 42001 and the EU AI Act

Why agentic AI security matters now

The OWASP Top 10 for Agentic Applications, released in December 2025, gave security teams a shared list of the risks that appear once AI starts taking actions: goal hijack, tool misuse, identity and privilege abuse, supply chain compromise, unexpected code execution, memory poisoning, insecure inter-agent communication, cascading failures, human-agent trust exploitation and rogue agents. Real incidents such as EchoLeak, the LiteLLM package compromise and the Replit production deletion show these risks are not theoretical.

Read the full description on Udemy on Udemy (opens in a new tab)

Prices, discounts and availability are set by Udemy. We may earn a commission when you purchase through links on this site.