John Sotiropoulos

Co-lead of the OWASP Agentic Security Initiative (ASI), the stream within the OWASP GenAI Security Project that produces the project’s agentic-AI security guidance.¹ He shares the ASI co-lead role with Ron F. Del Rosario (SAP).¹ His affiliations on OWASP material are ETSI and Deep Cyber.¹

The ASI working group he co-leads is the source of the wiki’s core OWASP agentic references: the Top 10 for Agentic Applications (ASI Top 10), the Agentic AI Threats and Mitigations guide, and the State of Agentic AI Security and Governance report.

Relevance to the Wiki

Sotiropoulos is named on the contributor roster of the v2 State of Agentic AI Security and Governance report (June 2026) in his ASI co-lead capacity.¹ He is a standards-side anchor for the OWASP agentic taxonomy that the wiki’s Capability Maturity Model and crosswalk map against.

The report’s three named section co-leads are Ariel Fogel (Pillar Security), Rock Lambros (Zenity / RockCyber), and Evgeniy Kokuykin (HiveTrace), not the ASI initiative co-leads; the document is collectively authored by the OWASP GenAI Security Project rather than attributed to a single lead author.¹

Footnotes

1. OWASP GenAI Security Project, State of Agentic AI Security and Governance, v2.01, June 2026 — Acknowledgements (pp. 134–135): “John Sotiropoulos, ASI co-lead, ETSI, Deep Cyber”; “Ron F. Del Rosario, ASI co-lead, SAP”; section co-leads listed as Ariel Fogel, Rock Lambros, and Evgeniy Kokuykin. .raw/papers/owasp-state-of-agentic-ai-security-governance-v2.01.pdf. ↩ ↩² ↩³ ↩⁴ ↩⁵