41:I[185,["/_next/static/chunks/3xnt26d00_zk-.js","/_next/static/chunks/1s-yni1uf2lwd.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/06x30xgfe6iur.js","/_next/static/chunks/3b4qrzgkt_l12.js","/_next/static/chunks/15lgs8s22dk5l.js"],"SendEmailButton"] 43:I[63625,["/_next/static/chunks/3xnt26d00_zk-.js","/_next/static/chunks/1s-yni1uf2lwd.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/06x30xgfe6iur.js","/_next/static/chunks/3b4qrzgkt_l12.js","/_next/static/chunks/15lgs8s22dk5l.js"],"AddToLibraryButton"] 44:I[29721,["/_next/static/chunks/3xnt26d00_zk-.js","/_next/static/chunks/1s-yni1uf2lwd.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/06x30xgfe6iur.js","/_next/static/chunks/3b4qrzgkt_l12.js","/_next/static/chunks/15lgs8s22dk5l.js"],"ShareButton"] 45:I[58016,["/_next/static/chunks/3xnt26d00_zk-.js","/_next/static/chunks/1s-yni1uf2lwd.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/06x30xgfe6iur.js","/_next/static/chunks/3b4qrzgkt_l12.js","/_next/static/chunks/15lgs8s22dk5l.js"],"ProcessEpisodeButton"] 46:I[45269,["/_next/static/chunks/3xnt26d00_zk-.js","/_next/static/chunks/1s-yni1uf2lwd.js","/_next/static/chunks/42spz6paskvb6.js","/_next/static/chunks/06x30xgfe6iur.js","/_next/static/chunks/3b4qrzgkt_l12.js","/_next/static/chunks/15lgs8s22dk5l.js"],"SignupCTA"] 3b:["$","h1",null,{"className":"max-w-[22ch] font-display text-[clamp(32px,4.5vw,48px)] font-medium leading-[1.05] tracking-[-0.02em] text-[color:var(--fg-1)] text-balance","children":"Inside the OWASP Agent Security Regression Harness Project - Mert Satilmaz - ASW #393"}] 3c:["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 font-mono text-[12px] uppercase tracking-[0.1em] text-[color:var(--fg-3)]","children":[["$","time",null,{"dateTime":"2026-07-28T09:00:00.000Z","children":"July 28, 2026"}],["$","span",null,{"aria-hidden":true,"children":"·"}],["$","span",null,{"children":"01:09:55"}],false]}] 42:T4f6,

Orgs need to be able to use agents, MCPs, and LLMs in ways that don't lead to unexpected actions and undesirable outcomes. The OWASP Agent Security Regression Harness project is an approach for defining customizable scenarios and testing whether those systems fail against known security threats. Mert Saltimaz talks about the background of the project, how orgs can use it as they bring more LLMs into their environment, and how the project intends to grow. Importantly, we also talk about the security controls and designs that orgs can build around the systems and data that models interact with in addition to evaluating the security of the agents and agent harnesses themselves.

Segment Resources:

https://github.com/OWASP/Agent-Security-Regression-Harness
https://youtu.be/6DWs5EwbFQ0?si=r0IJ_F0SZnkPzzYg -- "What Trading Systems Taught Me About Breaking (And Defending) Infrastructure"

Show Notes: https://securityweekly.com/asw-393