AI Exchange:
the world's AI security guide
300+ pages of free, constantly-evolving, practical guidance on securing AI systems - representing the closest publicly available alignment of global expert consensus, contributed directly into the AI Act and ISO standards throug a unique SDO partnership.
We are an international open consortium of top level experts, using this Flagship OWASP project to serve as a bridge between practitioners, researchers, institutes, and policy makers.
Technology with global impact requires global action.
Discover, Connect, and Contribute
About
OWASP AI Exchange is the open-source platform driving global AI security standards...
Learn more >
Contribute
Help shape the future of AI security by contributing to our resources and standards.
Learn more >
Your Guide to What's Inside
Content Overview
00AI Security Overview
This section provides an overview of AI security — including threats, controls, and risk analysis to help understand the structure of the AI Exchange.
01General controls
These are the controls every organisation should have in place...
02Input threats and controls
Attacks by crafting inputs to AI, and their countermeasures...
03Development-time threats and controls
Attacks to the development environment and supply chain of AI systems, and what you can do about it...
04Runtime conventional security threats
Attacks to the AI system in operation apart from the input attacks, and protective controls...
05AI Security Testing
AI security tests simulate adversarial behaviours to uncover vulnerabilities, weaknesses and risks in AI systems...
06AI Privacy
Apart from protecting personal data, AI systems have several responsibilities when it comes to privacy...
07References
References on specific topics can be found throughout the AI Exchange content. This section contains an overview...
Optimizing AI w/ Rob van der Veer
2025-04-23
Sponsorship benefits include
Visibility
Showcase your organization’s commitment to AI security within a network of industry leaders and experts.
Collaboration
Participate in the development of global AI security guidelines, standards, and regulations.
Thought Leadership
Contribute to key insights on AI threats, risks, and controls, positioning your organization as a leader in AI security.
