Agentic AI Security: OWASP Top 10 for AI Agents & MCP

About this course

AI agents don't just answer questions. They act. They open files, call APIs, send email, run code and talk to other agents, often with nobody checking each step. That changes the threat model: an attacker no longer needs to break in when they can talk a trusted helper into working for them.

This course shows you how to secure those agents, in plain English, with real incidents and controls you can defend in a design review.

What's inside

• The OWASP Top 10 for Agentic Applications (2026 edition), ASI01 to ASI10. One lesson per risk: how the attack works, a real-world incident, the controls, and the four checks to run before launch.
• Threat modeling for agents. Trust boundaries, the lethal trifecta, and how to rate every tool by what it can change.
• MCP security in two lessons, based on the current specification (July 2026): tool poisoning, rug pulls, OAuth and token audience, confused deputy, SSRF in discovery, scopes and sandboxing.
• A secure agent reference architecture and the go-live security review an approver can actually run.
• Real incidents explained carefully, including EchoLeak in Microsoft 365 Copilot, a malicious MCP server on npm, the GitHub MCP "toxic agent flow", and agents that went off script.

What you get

• About 100 minutes of short animated lessons (5–6 minutes each), with English captions
• A quiz at the end of each section and a 40-question practice test with every answer explained
• A downloadable AI Agent Go-Live Security Checklist and a one-page ASI01–ASI10 cheat sheet
• Revision notes for the whole course, plus a PDF of every slide

Your instructorI'm Nishant Sharma. I've worked in IT and security for over 15 years, and I lead security architecture and operations for a multinational group. I chair architecture reviews and sign off, or don't, before digital products go into production.

Read the full description on Udemy on Udemy (opens in a new tab)

Prices, discounts and availability are set by Udemy. We may earn a commission when you purchase through links on this site.