OWASP Foundation web repository. Contribute to OWASP/www-project-ai-testing-guide development by creating an account on GitHub.

Welcome to the GitHub repository for the OWASP AI Exchange, to be found at owaspai.org: the living set of documents that collect AI threats and controls from collaboration between experts worldwide.

April 28, 2026 - The AI Security Verification Standard (AISVS) focuses on providing developers, architects, and security professionals with a structured checklist to verify the security of AI-driven applications. - OWASP/AISVS

Mission Statement: The OWASP AI Maturity Assessment (AIMA) aims to be the premier framework that enables organizations to assess, analyze, and improve the security and responsible usage of AI technologies.

Comprehensive classification of attack surfaces, adversarial techniques, and governance vulnerabilities of AI. It details various types of attacks and provides mitigation strategies.

The content of the OWASP AI Exchange has moved to a new website with more advanced navigation at owaspai.org.

The OWASP GenAI Security Project is a global, open-source initiative dedicated to identifying, mitigating, and documenting security and safety risks associated with generative AI technologies.

OWASP Gen AI - Agentic Security Initiative has 2 repositories available. Follow their code on GitHub.

AI Guided Hybrid Application Static Testing. Contribute to owasp-aghast/aghast development by creating an account on GitHub.

1 week ago - The OWASP Gen AI Security Project is an OWASP Flagship Project and global, open-source initiative dedicated to identifying, mitigating, and documenting security and safety risks associated with generative AI technologies, including large language ...

Comprehensive guidance and alignment on how to protect AI against security threats - by professionals, for professionals. The goal of the OWASP AI Exchange is to protect society from AI security issues by independently harnessing the collective ...

A curated list of awesome AI security related frameworks, standards, learning resources and open source tools. If you want to contribute, create a PR or contact me @ottosulin. ... OWASP GenAI Threat & Defense Compass - Reference guide mapping ...

3 weeks ago - Offensive-security MCP server with 205 wrapped tools, 17 specialist agents, and 60 SPA-aware probes for OWASP Top 10. CLI + MCP, BYO LLM. No API key needed on MCP path. - 0xSteph/pentest-ai

AI IDE Attacks — Exploiting Cursor, GitHub Copilot, Claude Code via rules files and MCP config · RAG Poisoning — Injecting malicious content into retrieval-augmented generation pipelines · Training Data Exfiltration — Extracting memorized private data · Denial of Service — Overloading models via crafted prompts · Agent-to-Agent Attacks — Compromising multi-agent pipelines (A2A protocol abuse) ... OWASP LLM01:2025 Prompt Injection — Canonical definition updated for agentic systems; the baseline every 2025–26 tool cites

The primary aim of the OWASP Large Language Model Security Verification Standard (LLMSVS) Project is to provide an open security standard for systems which leverage artificial intelligence and Large Language Models.

May 30, 2026 - OWASP/wrongsecrets-binaries's past year of commit activity ... AI-powered Docker security scanner that explains vulnerabilities in plain English.

OWASP Foundation web repository. Contribute to OWASP/www-project-ai-testing-guide development by creating an account on GitHub.

Phase 0: Marco Morana and Matteo ... outline clearly defining the scope, mission, and testing categories. Establish an OWASP GitHub repository ......

AI-Goat is a deliberately vulnerable AI infrastructure hosted on AWS, designed to simulate the OWASP Machine Learning Security Top 10 risks (OWASP ML Top 10). AI-Goat replicates real-world AI cloud deployment environments but introduces ...

security web owasp cybersecurity webappsec owasp-top-10 owasp-top-ten cybersecurity-education ... Open source AI-powered penetration testing orchestrator that automates reconnaissance, vulnerability discovery, and analysis.