[
  {
    "id": "owasp-asi",
    "title": "OWASP Agentic Security Initiative",
    "url": "https://genai.owasp.org/initiatives/agentic-security-initiative/",
    "type": "Guides & standards",
    "topics": [
      "Security",
      "Governance"
    ],
    "scope": "Agent-specific",
    "cost": "Free",
    "description": "Threat models, community guidance, and security workstreams for autonomous agents.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://genai.owasp.org/initiatives/agentic-security-initiative/",
    "verification": "Page inspected",
    "failure_modes": [
      "governance"
    ]
  },
  {
    "id": "finbot",
    "title": "OWASP FinBot CTF",
    "url": "https://github.com/OWASP-ASI/finbot-ctf-demo",
    "type": "CTFs & labs",
    "topics": [
      "Red teaming",
      "Security"
    ],
    "scope": "Agent-specific",
    "cost": "Free / infrastructure costs",
    "description": "Practice goal manipulation and prompt injection against a deliberately vulnerable invoice-processing agent.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://github.com/OWASP-ASI/finbot-ctf-demo",
    "verification": "Page inspected",
    "failure_modes": [
      "injection",
      "goal-hijack"
    ]
  },
  {
    "id": "pwngpt",
    "title": "PwnGPT — Agentic LLM CTF",
    "url": "https://github.com/c-goosen/ai-prompt-ctf",
    "type": "CTFs & labs",
    "topics": [
      "Red teaming",
      "Security"
    ],
    "scope": "Agent-specific",
    "cost": "Free / infrastructure costs",
    "description": "Self-hosted prompt-injection challenges with tool use and multiple agent levels.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://github.com/c-goosen/ai-prompt-ctf",
    "verification": "Page inspected",
    "failure_modes": [
      "injection"
    ]
  },
  {
    "id": "secure-code",
    "title": "GitHub Secure Code Game",
    "url": "https://github.com/skills/secure-code-game",
    "type": "CTFs & labs",
    "topics": [
      "Security"
    ],
    "scope": "Foundations",
    "cost": "Free",
    "description": "Practice finding and fixing software vulnerabilities; useful groundwork for securing agent applications.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://github.com/skills/secure-code-game",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "agentdojo",
    "title": "AgentDojo",
    "url": "https://github.com/ethz-spylab/agentdojo",
    "type": "Repositories & tools",
    "topics": [
      "Red teaming",
      "Security"
    ],
    "scope": "Agent-specific",
    "cost": "Free / infrastructure costs",
    "description": "Research environment for evaluating prompt-injection attacks and defenses in tool-using agents.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://github.com/ethz-spylab/agentdojo",
    "verification": "Page inspected",
    "failure_modes": [
      "injection",
      "tool-exfil"
    ]
  },
  {
    "id": "agentgateway",
    "title": "agentgateway",
    "url": "https://github.com/agentgateway/agentgateway",
    "type": "Repositories & tools",
    "topics": [
      "Security",
      "Governance"
    ],
    "scope": "Agent-specific",
    "cost": "Free / infrastructure costs",
    "description": "Open-source gateway with documented JWT, API-key and OAuth authentication, fine-grained authorization, rate limits, TLS, and telemetry for MCP, A2A and model traffic. Quickstarts provide a starting point for studying agent access controls and observability; features were documented, not deployment-tested.",
    "availability": "Available",
    "checked_on": "2026-10-07",
    "evidence": "https://github.com/agentgateway/agentgateway",
    "verification": "Page inspected",
    "failure_modes": [
      "identity",
      "governance"
    ]
  },
  {
    "id": "caase",
    "title": "Certified Agentic AI Security Expert (CAASE)",
    "url": "https://www.practical-devsecops.com/certified-agentic-ai-security-expert/",
    "type": "Certifications",
    "topics": [
      "Security",
      "Red teaming"
    ],
    "scope": "Agent-specific",
    "cost": "Paid",
    "description": "Provider describes practical training in agent reasoning, memory, tool use, and multi-agent identity. Listed as coming soon when checked.",
    "availability": "Coming soon",
    "checked_on": "2026-09-28",
    "evidence": "https://www.practical-devsecops.com/certified-agentic-ai-security-expert/",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "sans546",
    "title": "SANS SEC546: Securing Agentic AI",
    "url": "https://www.sans.org/cyber-security-courses/securing-agentic-ai",
    "type": "Courses",
    "topics": [
      "Security"
    ],
    "scope": "Agent-specific",
    "cost": "Paid",
    "description": "Instructor-led training focused on securing agentic AI systems. Check current dates and prerequisites with SANS.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://www.sans.org/cyber-security-courses/securing-agentic-ai",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "sans-webcast",
    "title": "Securing Agentic AI: Where Do You Start?",
    "url": "https://www.sans.org/webcasts/securing-agentic-ai-where-do-you-start",
    "type": "Videos & webinars",
    "topics": [
      "Security"
    ],
    "scope": "Agent-specific",
    "cost": "Check provider",
    "description": "SANS introductory webcast on approaching agentic AI security. Registration or replay availability may vary.",
    "availability": "Check provider",
    "checked_on": "2026-09-28",
    "evidence": "https://www.sans.org/webcasts/securing-agentic-ai-where-do-you-start",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "coursera",
    "title": "Agentic AI Development & Security",
    "url": "https://www.coursera.org/specializations/agentic-ai-development-security",
    "type": "Courses",
    "topics": [
      "Security"
    ],
    "scope": "Agent-specific",
    "cost": "Check provider",
    "description": "Specialization combining agent development and security concepts. Verify enrollment and certificate terms.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://www.coursera.org/specializations/agentic-ai-development-security",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "ai-academy",
    "title": "AI Security Academy",
    "url": "https://www.aisecurityacademy.ai/",
    "type": "Courses",
    "topics": [
      "Security",
      "Red teaming"
    ],
    "scope": "Broader AI",
    "cost": "Check provider",
    "description": "AI security training catalog; select courses based on their syllabus and agent relevance.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://www.aisecurityacademy.ai/",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "astrix",
    "title": "Astrix AI Agent Training Program",
    "url": "https://astrix.security/learn/ai-agent-training-program/",
    "type": "Courses",
    "topics": [
      "Security"
    ],
    "scope": "Agent-specific",
    "cost": "Check provider",
    "description": "Vendor-produced training collection about AI agents and their security.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://astrix.security/learn/ai-agent-training-program/",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "watcher",
    "title": "Apollo Research Watcher",
    "url": "https://watcher.apolloresearch.ai/",
    "type": "Repositories & tools",
    "topics": [
      "Safety",
      "Security"
    ],
    "scope": "Agent-specific",
    "cost": "Check provider",
    "description": "Runtime monitoring and control project for studying and managing agent behavior.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://watcher.apolloresearch.ai/",
    "verification": "Page inspected",
    "failure_modes": [
      "traces/custody",
      "scope/RoE"
    ]
  },
  {
    "id": "langchain-cert",
    "title": "LangChain Certified Agent Engineer",
    "url": "https://academy.langchain.com/pages/certifications-lcae",
    "type": "Certifications",
    "topics": [
      "Security"
    ],
    "scope": "Foundations",
    "cost": "Check provider",
    "description": "Agent engineering credential. Useful implementation background, not a dedicated agent-security certification.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://academy.langchain.com/pages/certifications-lcae",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "taise",
    "title": "CSA Trusted AI Safety Expert (TAISE)",
    "url": "https://cloudsecurityalliance.org/education/taise",
    "type": "Certifications",
    "topics": [
      "Safety",
      "Governance",
      "Security"
    ],
    "scope": "Broader AI",
    "cost": "Paid",
    "description": "AI safety certificate program covering organizational practices and responsible adoption.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://cloudsecurityalliance.org/education/taise",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "aarm",
    "title": "CSA Autonomous Action Runtime Management",
    "url": "https://cloudsecurityalliance.org/research/working-groups/autonomous-action-runtime-management-aarm",
    "type": "Guides & standards",
    "topics": [
      "Governance",
      "Security"
    ],
    "scope": "Agent-specific",
    "cost": "Free",
    "description": "Working group exploring runtime controls and governance for autonomous actions.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://cloudsecurityalliance.org/research/working-groups/autonomous-action-runtime-management-aarm",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "proof-of-control-working-draft",
    "title": "Proof-of-Control v1.0 Working Draft",
    "url": "https://advancedaisociety.org/proof-of-control",
    "type": "Guides & standards",
    "topics": [
      "Security",
      "Governance"
    ],
    "scope": "Agent-specific",
    "cost": "Free",
    "description": "Advanced AI Society working draft on runtime evidence, authorization, and independent verification of agent actions, with schemas and reference artifacts. Distinguishes tamper-evident records from complete observation and gated execution. Public comment is open through October 30, 2026; draft claims are not established production guarantees.",
    "availability": "Available",
    "checked_on": "2026-10-07",
    "evidence": "https://github.com/LFDT-ProofOfControl/ov-poc-standard",
    "verification": "Page inspected",
    "failure_modes": [
      "traces/custody",
      "governance"
    ]
  },
  {
    "id": "mcp-security",
    "title": "MCP Security Best Practices",
    "url": "https://modelcontextprotocol.io/docs/tutorials/security/security_best_practices",
    "type": "Guides & standards",
    "topics": [
      "Security"
    ],
    "scope": "Agent-specific",
    "cost": "Free",
    "description": "Official guidance on authorization, confused-deputy risks, token handling, and other MCP security concerns.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://modelcontextprotocol.io/docs/tutorials/security/security_best_practices",
    "verification": "Page inspected",
    "failure_modes": [
      "identity",
      "tool-exfil"
    ]
  },
  {
    "id": "nist-rmf",
    "title": "NIST AI Risk Management Framework",
    "url": "https://airc.nist.gov/airmf-resources/airmf/",
    "type": "Guides & standards",
    "topics": [
      "Governance",
      "Safety"
    ],
    "scope": "Broader AI",
    "cost": "Free",
    "description": "Voluntary framework for governing, mapping, measuring, and managing AI risk. Foundation for agent governance; not a certification.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://airc.nist.gov/airmf-resources/airmf/",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "safety-book",
    "title": "Introduction to AI Safety, Ethics, and Society",
    "url": "https://www.aisafetybook.com/",
    "type": "Books",
    "topics": [
      "Safety",
      "Governance"
    ],
    "scope": "Broader AI",
    "cost": "Free",
    "description": "Online textbook introducing AI risks, safety, ethics, and societal governance.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://www.aisafetybook.com/",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "simon",
    "title": "Simon Willison: Prompt Injection",
    "url": "https://simonwillison.net/tags/prompt-injection/",
    "type": "Blogs & newsletters",
    "topics": [
      "Security"
    ],
    "scope": "Agent-specific",
    "cost": "Free",
    "description": "Technical explanations and commentary on prompt injection and the risks of tool-using AI systems.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://simonwillison.net/tags/prompt-injection/",
    "verification": "Page inspected",
    "failure_modes": [
      "injection"
    ]
  },
  {
    "id": "embrace",
    "title": "Embrace The Red",
    "url": "https://embracethered.com/blog/",
    "type": "Blogs & newsletters",
    "topics": [
      "Security",
      "Red teaming"
    ],
    "scope": "Broader AI",
    "cost": "Free",
    "description": "Security research blog with practical investigations of prompt injection, assistants, and agent attack surfaces.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://embracethered.com/blog/",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "owasp-video",
    "title": "OWASP Foundation YouTube",
    "url": "https://www.youtube.com/channel/UCe8j61ABYDuPTdtjItD2veA",
    "type": "YouTube channels",
    "topics": [
      "Security",
      "Red teaming"
    ],
    "scope": "Foundations",
    "cost": "Free",
    "description": "Application-security conference recordings, including AI security content. Choose agent-specific talks within this broad channel.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://www.youtube.com/channel/UCe8j61ABYDuPTdtjItD2veA",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "80k",
    "title": "80,000 Hours Podcast",
    "url": "https://80000hours.org/podcast/",
    "type": "Podcasts",
    "topics": [
      "Safety",
      "Governance"
    ],
    "scope": "Broader AI",
    "cost": "Free",
    "description": "Long-form interviews including AI risk, alignment, and governance; the feed also covers other topics.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://80000hours.org/podcast/",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "pyrit",
    "title": "Microsoft PyRIT",
    "url": "https://github.com/microsoft/PyRIT",
    "type": "Repositories & tools",
    "topics": [
      "Red teaming",
      "Safety"
    ],
    "scope": "Broader AI",
    "cost": "Free / infrastructure costs",
    "description": "Open-source framework for identifying generative AI risks through adversarial testing.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://github.com/microsoft/PyRIT",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "garak",
    "title": "NVIDIA garak",
    "url": "https://github.com/NVIDIA/garak",
    "type": "Repositories & tools",
    "topics": [
      "Red teaming",
      "Security"
    ],
    "scope": "Broader AI",
    "cost": "Free / infrastructure costs",
    "description": "LLM vulnerability scanner useful for learning about model-level risks within agent systems.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://github.com/NVIDIA/garak",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "orca-incident-archive",
    "title": "Orca AI Incident Archive",
    "url": "https://github.com/Continuum-AI-Corp/Orca-AI-Incident-Archive",
    "type": "Repositories & tools",
    "topics": [
      "Security",
      "Governance"
    ],
    "scope": "Agent-specific",
    "cost": "Free",
    "description": "Vendor-maintained (Continuum AI) archive of publicly disclosed AI agent security events, including incidents, vulnerabilities, research and policy. Distinguishes confirmed harm from demonstrations and labels disputed records and broader AI infrastructure. Source-linked case studies; verify individual cases against their cited sources.",
    "availability": "Available",
    "checked_on": "2026-10-07",
    "evidence": "https://github.com/Continuum-AI-Corp/Orca-AI-Incident-Archive",
    "verification": "Page inspected",
    "failure_modes": [
      "injection",
      "tool-exfil",
      "governance"
    ]
  },
  {
    "id": "aaif",
    "title": "Linux Foundation: Agentic AI Foundation",
    "url": "https://www.linuxfoundation.org/press/linux-foundation-announces-the-formation-of-the-agentic-ai-foundation",
    "type": "Guides & standards",
    "topics": [
      "Governance"
    ],
    "scope": "Foundations",
    "cost": "Free",
    "description": "Background on the foundation and projects including MCP, goose, and AGENTS.md; an ecosystem orientation resource.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://www.linuxfoundation.org/press/linux-foundation-announces-the-formation-of-the-agentic-ai-foundation",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "coding-agent-threat-model",
    "title": "Coding Agent Threat Model — Apollo Watcher Student Guide",
    "url": "https://joseruiz1571.github.io/awesome-agent-security-learning/#threat-model",
    "type": "Guides & standards",
    "topics": [
      "Security",
      "Red teaming",
      "Safety"
    ],
    "scope": "Agent-specific",
    "cost": "Free",
    "description": "Original infographic and student worksheet tracing coding-agent threats, Watcher review coverage and independent execution controls. Includes primary sources and a harmless classroom exercise.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://github.com/joseruiz1571/awesome-agent-security-learning/blob/main/docs/CODING_AGENT_THREAT_MODEL.md",
    "verification": "Page inspected",
    "failure_modes": [
      "injection",
      "tool-exfil",
      "traces/custody",
      "scope/RoE"
    ]
  },
  {
    "id": "trace-tampering",
    "title": "LLM Agents Can Easily Tamper With Their Own Traces",
    "url": "https://arxiv.org/abs/2609.30266",
    "type": "Research",
    "topics": [
      "Security",
      "Safety"
    ],
    "scope": "Agent-specific",
    "cost": "Free",
    "description": "Research on agents altering local execution records. Examines trace custody and argues for independent interception outside the agent’s control; findings concern the tested configurations.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://arxiv.org/abs/2609.30266",
    "verification": "Page inspected",
    "failure_modes": [
      "traces/custody",
      "injection"
    ]
  },
  {
    "id": "scopebench",
    "title": "ScopeBench: Do Agents Preserve Engagement Boundaries Under Goal Pressure?",
    "url": "https://arxiv.org/abs/2609.30325",
    "type": "Research",
    "topics": [
      "Security",
      "Safety"
    ],
    "scope": "Agent-specific",
    "cost": "Free",
    "description": "Benchmark separating task capability from scope adherence under goal pressure. Study of 30 tasks and eight models in one harness; useful for reasoning about rules of engagement, not a universal safety score.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://arxiv.org/abs/2609.30325",
    "verification": "Page inspected",
    "failure_modes": [
      "scope/RoE",
      "goal-hijack"
    ]
  },
  {
    "id": "agate",
    "title": "AGATE: Provenance-Based Runtime Defense",
    "url": "https://arxiv.org/abs/2609.30830",
    "type": "Research",
    "topics": [
      "Security",
      "Safety"
    ],
    "scope": "Agent-specific",
    "cost": "Free",
    "description": "Research on a harness-level authorization and data-provenance gate with deterministic decisions, without an LLM in the decision path. Reports limits involving transformations, legitimate reuse and observation coverage.",
    "availability": "Available",
    "checked_on": "2026-09-28",
    "evidence": "https://arxiv.org/abs/2609.30830",
    "verification": "Page inspected",
    "failure_modes": [
      "identity",
      "tool-exfil",
      "traces/custody"
    ]
  },
  {
    "id": "darkmoon",
    "title": "Darkmoon",
    "url": "https://github.com/ASCIT31/Dark-Moon",
    "type": "Repositories & tools",
    "topics": [
      "Red teaming",
      "Security"
    ],
    "scope": "Broader AI",
    "cost": "Free / infrastructure costs",
    "description": "Open-source (GPLv3) autonomous penetration-testing platform, built and maintained by ASC-IT (the Darkmoon team). An LLM orchestrates specialist agents and offensive tools over a controlled, logged MCP interface, running on local models (Ollama, llama.cpp) or cloud providers (Anthropic, OpenAI, OpenRouter). Instructive for studying how an agentic system plans and chains tools end to end, and how an MCP gatekeeping layer and a local Privacy Gateway (reversible tokenization of real IPs, hosts and credentials) constrain it. Each finding is documented with the exact command run and its raw output; exploit confirmation is agent-asserted (re-tested only in the paid Pro tier), not a guaranteed real exploit. The free Community edition is a CLI/SDK; the web dashboard and remediation-to-pull-request are paid Darkmoon Pro. Advanced / disposable-lab setup only: the default docker-compose uses host networking, runs as root, and mounts the Docker socket and kubeconfig, so run it only against an authorized throwaway lab, never a daily-use machine or production.",
    "availability": "Available",
    "checked_on": "2026-10-06",
    "evidence": "https://github.com/ASCIT31/Dark-Moon",
    "verification": "Page inspected",
    "failure_modes": []
  },
  {
    "id": "pwned-labs-aisrtp",
    "title": "Pwned Labs AI Systems Red Team Professional (AISRTP)",
    "url": "https://pwnedlabs.io/bootcamps/ai-systems-red-team-certification-aisrtp",
    "type": "Certifications",
    "topics": [
      "Security",
      "Red teaming"
    ],
    "scope": "Agent-specific",
    "cost": "Paid",
    "description": "Provider-described practical certification covering prompt injection, RAG poisoning, agent/tool abuse, and MCP attack paths. The associated bootcamp lists a 24-hour hands-on exam and an October 20, 2026 launch; verify current enrollment and assessment terms.",
    "availability": "Coming soon",
    "checked_on": "2026-10-07",
    "evidence": "https://pwnedlabs.io/bootcamps/aisrtp-bootcamp",
    "verification": "Page inspected",
    "failure_modes": [
      "injection"
    ]
  },
  {
    "id": "aws-securing-agent-identities-demonstrated",
    "title": "AWS Securing Agent Identities Demonstrated",
    "url": "https://skillbuilder.aws/learn/Z8M87YZWXB/aws-securing-agent-identities-demonstrated/9ZRC3U51YT",
    "type": "Certifications",
    "topics": [
      "Security"
    ],
    "scope": "Agent-specific",
    "cost": "Free",
    "description": "AWS microcredential assessing agent workload identities, tag-based access control, scoped JWT authorization, authentication methods, and token audit trails in a timed, live AWS lab. AWS states no Skill Builder subscription is required; passing earns a Credly badge. Distinct from AWS Certification.",
    "availability": "Available",
    "checked_on": "2026-10-07",
    "evidence": "https://aws.amazon.com/blogs/training-and-certification/prove-your-agentic-ai-skills-two-new-microcredentials-now-available/",
    "verification": "Page inspected",
    "failure_modes": [
      "identity"
    ]
  },
  {
    "id": "secops-certified-agentic-ai-pentester",
    "title": "SecOps Group Certified Agentic AI Pentester (C-AgAIPen)",
    "url": "https://pentestingexams.com/certifications/professional/certified-agentic-ai-pentester/",
    "type": "Certifications",
    "topics": [
      "Security",
      "Red teaming"
    ],
    "scope": "Agent-specific",
    "cost": "Paid",
    "description": "Provider-described intermediate, four-hour practical exam with flag-based challenges against agentic applications accessed over VPN. Covers prompt injection, goal hijacking, tool abuse, memory, and multi-agent workflows. Prior application pentesting experience is recommended; the provider prohibits AI assistance during the exam.",
    "availability": "Available",
    "checked_on": "2026-10-07",
    "evidence": "https://pentestingexams.com/certifications/professional/certified-agentic-ai-pentester/",
    "verification": "Page inspected",
    "failure_modes": [
      "injection",
      "goal-hijack",
      "memory"
    ]
  },
  {
    "id": "aisec-university-mcp-security-fundamentals",
    "title": "AI Security University: MCP Security Fundamentals",
    "url": "https://aisec.university/courses/mcp-security-fundamentals",
    "type": "Courses",
    "topics": [
      "Security"
    ],
    "scope": "Agent-specific",
    "cost": "Free",
    "description": "Free, self-paced course with 21 lessons on MCP architecture, the OWASP MCP Top 10, incidents, and mitigations. Covers token exposure, privilege escalation, tool poisoning, supply-chain tampering, and command injection. The provider issues a verifiable course-completion certificate after a final quiz.",
    "availability": "Available",
    "checked_on": "2026-10-07",
    "evidence": "https://aisec.university/courses/mcp-security-fundamentals",
    "verification": "Page inspected",
    "failure_modes": [
      "injection",
      "identity"
    ]
  }
]