diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 37350d3..b2ef1b1 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -149,7 +149,7 @@ Pages source is deliberately switched to a workflow-based deploy.
 ## Code of conduct
 
 This project follows the
-[OWASP Code of Conduct](https://owasp.org/www-policy/operational/code-of-conduct.html).
+[OWASP Code of Conduct](https://policy.owasp.org/operational/code-of-conduct).
 All contributors are expected to engage respectfully and constructively.
 
 ---
diff --git a/agentic-top10/Agentic_COSAI.md b/agentic-top10/Agentic_COSAI.md
index 7f2d93c..93838b7 100644
--- a/agentic-top10/Agentic_COSAI.md
+++ b/agentic-top10/Agentic_COSAI.md
@@ -9,8 +9,8 @@
 
 # Agentic Top 10 2026 × CoSAI
 
-Mapping the [OWASP Top 10 for Agentic Applications 2026](https://genai.owasp.org/resource/agentic-ai-top-10/) to
-[CoSAI — Coalition for Secure AI](https://www.coalitionforsecureai.org/), published by OASIS / Coalition for Secure AI.
+Mapping the [OWASP Top 10 for Agentic Applications 2026](https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/)
+to [CoSAI — Coalition for Secure AI](https://www.coalitionforsecureai.org/), published by OASIS / Coalition for Secure AI.
 
 > **Candidate mapping — SME review required.** Every row below is a `DRAFT`.
 > The control ids and titles are read from `data/frameworks/cosai.json`, so they are
diff --git a/agentic-top10/Agentic_GPAICOP.md b/agentic-top10/Agentic_GPAICOP.md
index d223fd7..c763eda 100644
--- a/agentic-top10/Agentic_GPAICOP.md
+++ b/agentic-top10/Agentic_GPAICOP.md
@@ -9,8 +9,9 @@
 
 # Agentic Top 10 2026 × GPAI Code of Practice
 
-Mapping the [OWASP Top 10 for Agentic Applications 2026](https://genai.owasp.org/resource/agentic-ai-top-10/) to
-[EU AI Act General-Purpose AI Code of Practice](https://code-of-practice.ai/), published by European Commission / AI Office.
+Mapping the [OWASP Top 10 for Agentic Applications 2026](https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026/)
+to [EU AI Act General-Purpose AI Code of Practice](https://code-of-practice.ai/),
+published by European Commission / AI Office.
 
 > **Candidate mapping — SME review required.** Every row below is a `DRAFT`.
 > The control ids and titles are read from `data/frameworks/eu-ai-act-cop.json`, so they are