# Inside the OWASP Agent Security Regression Harness Project - Mert Satilmaz - ASW #393

Page: https://stenobird.com/podcast/security-weekly-podcast-network-video-841420/inside-the-owasp-agent-security-regression-harness-project-mert-satilmaz-asw-393
Text version: https://stenobird.com/podcast/security-weekly-podcast-network-video-841420/inside-the-owasp-agent-security-regression-harness-project-mert-satilmaz-asw-393.md
Podcast: [Security Weekly Podcast Network (Video)](https://stenobird.com/podcast/security-weekly-podcast-network-video-841420)
Published: 2026-07-28T09:00:00+00:00
Episode link: https://securityweeklytv.libsyn.com/inside-the-owasp-agent-security-regression-harness-project-mert-satilmaz-asw-393
Audio file: https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/securityweeklytv/ASW_393_1--63928861-c181-43b5-b39c-b0374d62d61a--sd-converted--0b37dd8d-3a16-4833-b266-6d1438f8a475.mp4?dest-id=292819
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/security-weekly-podcast-network-video-841420/episodes/inside-the-owasp-agent-security-regression-harness-project-mert-satilmaz-asw-393
Duration seconds: 4195

## Resource

Orgs need to be able to use agents, MCPs, and LLMs in ways that don't lead to unexpected actions and undesirable outcomes. The OWASP Agent Security Regression Harness project is an approach for defining customizable scenarios and testing whether those systems fail against known security threats. Mert Saltimaz talks about the background of the project, how orgs can use it as they bring more LLMs into their environment, and how the project intends to grow. Importantly, we also talk about the security controls and designs that orgs can build around the systems and data that models interact with in addition to evaluating the security of the agents and agent harnesses themselves. Segment Resources: https://github.com/OWASP/Agent-Security-Regression-Harness https://youtu.be/6DWs5EwbFQ0?si=r0IJ_F0SZnkPzzYg -- "What Trading Systems Taught Me About Breaking (And Defending) Infrastructure" Show Notes: https://securityweekly.com/asw-393

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/security-weekly-podcast-network-video-841420/episodes/inside-the-owasp-agent-security-regression-harness-project-mert-satilmaz-asw-393/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/security-weekly-podcast-network-video-841420/inside-the-owasp-agent-security-regression-harness-project-mert-satilmaz-asw-393.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.