AI Security OWASP SIEM LLM Top 10 · Agentic (ASI) Top 10 — compiled & maintained by LK
OWASP GenAI Security Project · Full Stack

59 SIEM use cases across
every OWASP AI framework.

Every category from OWASP's Top 10 for LLM Applications (2025) and the newly-released Top 10 for Agentic Applications (2026, ASI01–ASI10) — each broken into concrete, monitorable SIEM use cases with the log source to onboard. OWASP defines the risk taxonomy; the detection logic and log-source mapping are authored for SOC/detection-engineering use.

"
SIEM is expensive.
20 real OWASP categories, 59 authored use cases — ingesting every log source named here for every application is a budget conversation, not a checkbox. Scope to what your app stack actually exposes.

By OWASP framework

click a category to filter use cases below

Browse detection use cases

filter by severity, search by name or log source

loading use cases…

Related in your other libraries

this repo is deliberately scoped to OWASP frameworks — the rest of the AI stack lives elsewhere

MCP-specific security (OWASP MCP Top 10, MCP01–MCP10) has its own dedicated build: AI-MCP-SIEM-Detection-Use-Case.

MITRE ATLAS (178 techniques) and the OWASP LLM Top 10 quick-reference already live in the AI Security Use Case library — this repo goes deeper on OWASP specifically, with multiple SIEM use cases per category instead of one line each.

Sigma rule catalog — 2 rules cover MCP/LiteLLM supply-chain indicators relevant to LLM03/ASI04. See the Detection Use Cases catalog.