The ADLC maturity model: 5 stages of agentic development security | Endor Labs

Summary

Endor Labs proposes a five-stage ADLC maturity model for securing AI coding agents, scoring security maturity rather than adoption across two tracks: agent actions and agent output. The source says there is no official ADLC security maturity standard, and that OWASP SAMM has not yet added practice streams for agentic AI.

Topics

• AI agents

Related items

• HighCVE-2026-118378: Tabularis SQLite driver SQL injection through MCP describe_table toolSimilar attack · NVD/CVE Database
• InfoHeads of Security: Learned Attention Gates Improve Prompt Injection RobustnessSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoThe Envelope Layer: An Underestimated Surface of LLM Agent DefenseSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• HighCVE-2026-117569: Kali-GPT OS command injection in execute_tool through MCP scanner parametersSimilar attack · NVD/CVE Database
• HighCVE-2026-117567: esp-mcp OS command injection through MCP tool parametersSimilar attack · NVD/CVE Database