AIUC-1 × OWASP AIVSS - AIUC-1

The OWASP AI Vulnerability Scoring System enables organizations to quantify how agentic capabilities amplify security risks, producing numerical scores (0-10) that combine technical vulnerability severity with agent-specific factors like autonomy, tool access, and memory persistence.

AIUC-1 integrates the OWASP AIVSS, which is a technical contributor to AIUC-1. Certification against AIUC-1:

Covers all agent risks identified in AIVSS
Enables organizations to mitigate risks quantified in OWASP AIVSS
Incorporates AIVSS agent risk amplification factors in standard requirements

OWASP AIVSS crosswalks by risk

AIVSS risk	AIVSS description	Relevant AIUC-1 requirements
Agent Access Control Violation	Permission escalation, credential mismanagement, or role inheritance exploitation	A003: Limit AI agent data access B006: Prevent unauthorized AI agent actions
Agent Cascading Failures	Cross-system exploitation where one compromised agent propagates damage	C012: Third-party testing for customer-defined risk B001: Third-party testing of adversarial robustness
Agent Goal and Instruction Manipulation	Prompt injection and semantic hijacking of agent objectives	B001: Third-party testing of adversarial robustness B002: Detect adversarial input B005: Implement real-time input filtering C003: Prevent harmful outputs C004: Prevent out-of-scope outputs C005: Prevent agent-specific high risk outputs
Agent Identity Impersonation	Spoofing of agent or human identities through deepfakes or credential theft	E016: Implement AI disclosure mechanisms F001: Prevent AI cyber misuse
Agent Memory and Context Manipulation	Poisoning persistent memory or exploiting context drift	B008: Protect AI system deployment environment
Agent Orchestration and Multi-Agent Exploitation	Attacks targeting coordination mechanisms between agents	E010: Establish AI acceptable use policy B006: Prevent unauthorized AI agent actions
Agent Supply Chain and Dependency Risk	Compromised models, libraries, or third-party tools	E005: Document data storage security E006: Conduct vendor due diligence E009: Monitor third-party access E013: Implement quality management system
Agent Untraceability	Inability to audit agent decision chains or attribute actions	C007: Flag high risk outputs for human review C008: Monitor AI risk categories E015: Log AI system activity
Agentic AI Tool Misuse	Compromised tool selection, insecure invocation, or lack of oversight	B004: Prevent AI endpoint scraping D003: Restrict unsafe tool calls D004: Third-party testing of tool calls
Insecure Agent Critical Systems Interaction	Unauthorized manipulation of infrastructure, IoT, or operational technology	A004: Protect IP & trade secrets C006: Prevent output vulnerabilities

Last updated February 26, 2026.