aumos-owasp-defenses

OWASP Agentic Security Top 10 defensive implementations

Part of the AumOS open-source agent infrastructure portfolio.

Features

• Ten discrete defense modules aligned to the OWASP Agentic Security Top 10 (ASI-01 through ASI-10), each independently importable and composable
• AgentScanner performs structural analysis of an agent configuration dict and scores all ten ASI categories with findings, recommendations, and a letter grade (A–F)
• Four scan profiles — standard, quick, mcp_focused, and compliance (stricter thresholds) — so CI pipelines can tune thoroughness vs. speed
• Defense primitives include BoundaryDetector, SchemaValidator, RateLimiter, CapabilityChecker, VendorVerifier, ScopeLimiter, ProvenanceTracker, MessageValidator, CircuitBreaker, TrustVerifier, BaselineProfiler, and DriftDetector
• Middleware guards for LangChain, CrewAI, and generic ASGI/callable stacks that wrap existing agents without requiring internal changes
• agentcore bridge hooks the scanner into the EventBus so defense checks fire automatically on lifecycle events
• Report generator produces per-category results with actionable remediation steps in JSON or Markdown

Quick Start

Install from PyPI:

pip install aumos-owasp-defenses

Verify the installation:

aumos-owasp-defenses version

Basic usage:

import aumos_owasp_defenses

# See examples/01_quickstart.py for a working example

Documentation

• Architecture
• Contributing
• Changelog
• Examples

Enterprise Upgrade

For production deployments requiring SLA-backed support and advanced integrations, contact the maintainers or see the commercial extensions documentation.

Contributing

Contributions are welcome. Please read CONTRIBUTING.md before opening a pull request.

License

Apache 2.0 — see LICENSE for full terms.

Part of AumOS — open-source agent infrastructure.