← All topics

# Topic

OWASP

2 articles on this subject.

01 5 min read

MCP Triage: Turning Scanner Noise Into a Six-Item To-Do List

MCP security scanners are smoke alarms that go off every time you make toast — one audit found 21 of 27 alerts were false. mcp-triage is the layer that sits on top of any scanner and sorts the noise into the handful that matter, then governs the fleet against the OWASP MCP Top 10.

02 13 min read

A Control Framework for Non-Human & Agentic Identity

A practitioner control framework for governing non-human and agentic identities: eight principles, a four-tier risk model, thirty-five controls across eight domains, an agentic threat model, and a maturity model — mapped to OWASP NHI Top 10, NIST AI RMF, CSF 2.0, and 800-53.