# ASI10 - Rogue Agents

> Compromised agents that deviate from intended scope to act harmfully while appearing legitimate.

- **Category**: Owasp Agentic Ai
- **Subcategory**: top10_2026
- **Canonical URL**: https://designpattern.fyi/owasp_agentic_ai/asi10_rogue_agents/

---

## Description
'**Intent**: Detect and contain agents that have been compromised and are operating outside their intended behavioral boundaries.

**Context**: A compromised agent may continue to appear legitimate while secretly performing unauthorized actions, exfiltrating data, or influencing other agents in the network.

**Solution**: Implement behavioral monitoring and anomaly detection. Use canary tasks for detection. Apply kill switches and containment procedures. Monitor for scope deviation. Implement regular agent attestation. Use watchdog agents for oversight.'



## Use Cases
Use when deploying autonomous agents that operate with significant independence in production environments.





## Trade-offs


### Advantages

- Detects compromised agents

- Enables rapid containment

- Supports agent accountability

- Protects agent network integrity




### Considerations & Drawbacks

- Behavioral baselines are hard to establish

- False positives disrupt operations

- Sophisticated rogue behavior is hard to detect







---
**Reference**: [Original Source](https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026)