OWASP Agentic Top 10 Gets a Toolkit and the Agent Governance Stack Grows Up

Tools

Agent Governance Toolkit v3.0.1 Adds Rust and Go SDKs, SBOM Signing, and 7 New Fuzz Targets

The toolkit now covers all 10 OWASP Agentic AI risks with Rust and Go SDKs, secret scanning via Gitleaks, and SBOM generation with Ed25519 artifact signing. If you are shipping agents that touch real infrastructure, this is the security primitive you build on top of, not something you bolt on later.

Microsoft Agent Governance Toolkit: Sub-Millisecond Policy Enforcement for Autonomous Agents

The toolkit intercepts every agent action at under 0.1ms p99 latency and maps directly to the OWASP Agentic Top 10, which is the first formal taxonomy of autonomous agent risks. The OS-inspired architecture borrows kernel privilege rings and service mesh identity patterns, which means the security model has decades of battle-testing behind it rather than being invented from scratch.

News

Microsoft Agent Framework 1.0 Ships with Stable APIs, Multi-Agent Orchestration, and A2A Support

Agent Framework 1.0 locks in stable APIs for single agents, workflows, multi-agent orchestration, MCP tool discovery, and A2A protocol support across both Python and .NET. This is the production-ready consolidation of Semantic Kernel and AutoGen into one SDK, and the migration assistants make switching from either predecessor much lower friction than it would otherwise be.

Analysis

The Agent Governance Toolkit Covers the MCP Supply Chain Attack Surface Too

The MCP security scanner inside the toolkit detects tool poisoning and typosquatting in MCP servers, which is a threat category that is about to get a lot more attention as MCP becomes the default way agents connect to external tools. Framework-agnostic hooks mean you add governance with a pip install and a few config lines, not a rewrite.