WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks

Introduces WASP, an end-to-end benchmark for prompt-injection security in web agents. Its evaluation separates partial attack progress from completion of the attacker’s full objective.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research papers

Environment

web

Topics

safety-security, evaluation, web-navigation

Record publication date

2025-04-22

Evidence retrieved

2026-10-16T06:36:54Z

Resource ID

arxiv:2504.18575

Recorded paper version

arXiv v3

Version updated: 2025-05-16T22:42:29Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Ivan Evtimov, Arman Zharmagambetov, Aaron Grattafiori, Chuan Guo, Kamalika Chaudhuri

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

Reviewed against the complete retained original arXiv abstract. Experimental results and artifact availability have not been independently reproduced.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-16T06:36:54Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   4953a8e0f029016aef668bce98cec4d2873a7ae49c1fe33c4311fa5eb8d24089
2. editorial primary review

   Retrieved 2026-10-16T06:36:54Z. Supports: name, kind, summary, environments, topics, scope, notes.

   Content fingerprint

   4953a8e0f029016aef668bce98cec4d2873a7ae49c1fe33c4311fa5eb8d24089

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.