AI Exchange:
the world's AI security guide
This Flagship OWASP project provides 300+ pages of practical guidance on protecting AI systems - as contributed to the AI Act and ISO 27090 through a unique liaison partnership.
Discover, Connect, and Contribute
About
OWASP AI Exchange is the open-source platform driving global AI security standards...
Learn more >
Contribute
Help shape the future of AI security by contributing to our resources and standards.
Learn more >
Your Guide to What's Inside
Content Overview
00AI Security Overview
This section provides an overview of AI security — including threats, controls, and risk analysis to help understand the structure of the AI Exchange.
01General controls
These are the controls every organisation should have in place...
02Threats through use and controls
Attacks by crafting inputs to AI, and their countermeasures...
03Development-time threats and controls
Attacks to the development environment and supply chain of AI systems, and what you can do about it...
04Runtime application security threats
Attacks to the AI system in operation apart from the input attacks, and protective controls...
05AI Security Testing
AI security tests simulate adversarial behaviours to uncover vulnerabilities, weaknesses and risks in AI systems...
06AI Privacy
Apart from protecting personal data, AI systems have several responsibilities when it comes to privacy...
07References
References on specific topics can be found throughout the AI Exchange content. This section contains an overview...
Optimizing AI w/ Rob van der Veer
2025-04-23
Sponsorship benefits include
Visibility
Showcase your organization’s commitment to AI security within a network of industry leaders and experts.
Collaboration
Participate in the development of global AI security guidelines, standards, and regulations.
Thought Leadership
Contribute to key insights on AI threats, risks, and controls, positioning your organization as a leader in AI security.
