English

Resources, Initiatives

Agentic AI – Threats and Mitigations

Agentic AI represents an advancement in autonomous systems, increasingly enabled by large language models (LLMs) and generative AI. While agentic AI predates modern LLMs, their integration with generative AI has significantly expanded their scale, capabilities, and associated risks. This document is the first in a series of guides from the OWASP Agentic Security Initiative (ASI) […]

Agentic AI – Threats and Mitigations Read Post »

Resources, Initiatives

LLM and Gen AI Data Security Best Practices

The rapid proliferation of Large Language Models (LLMs) across various industries has highlighted the critical need for advanced data security practices. As these AI systems become more sophisticated, they bring with them unprecedented risks, including potential breaches of sensitive information and challenges in meeting stringent data protection regulations. This white paper outlines a comprehensive set

LLM and Gen AI Data Security Best Practices Read Post »

Resources, Initiatives

GenAI Red Teaming Guide

This guide outlines the critical components of GenAI Red Teaming, with actionable insights for cybersecurity professionals, AI/ML engineers, Red Team practitioners, risk managers, adversarial attack researchers, CISOs, architecture teams, and business leaders. The guide emphasizes a holistic approach to Red Teaming in four areas: model evaluation, implementation testing, infrastructure assessment, and runtime behavior analysis.

GenAI Red Teaming Guide Read Post »

Resources, Publications

LLM and Generative AI Security Solutions Landscape – Q1,2025

Updated for Q1, 2025 – The LLM and Generative AI Security Solutions Landscape is tailored for a diverse audience comprising developers, AppSec professionals, DevSecOps and MLSecOps teams, data engineers, data scientists, CISOs, and security leaders who are focused on developing strategies to secure Large Language Models (LLMs) and Generative AI applications. It provides a reference

LLM and Generative AI Security Solutions Landscape – Q1,2025 Read Post »

Resources, Initiatives

OWASP Top 10 for LLM Applications 2025

The OWASP Top 10 for Large Language Model Applications started in 2023 as a community-driven effort to highlight and address security issues specific to AI applications. Since then, the technology has continued to spread across industries and applications, and so have the associated risks. As LLMs are embedded more deeply in everything from customer interactions to internal operations, developers and security professionals are discovering new vulnerabilities—and ways to counter them.

OWASP Top 10 for LLM Applications 2025 Read Post »

Resources, Initiatives

LLM and Generative AI Security Solutions Landscape

The LLM and Generative AI Security Solutions Landscape is tailored for a diverse audience comprising developers, AppSec professionals, DevSecOps and MLSecOps teams, data engineers, data scientists, CISOs, and security leaders who are focused on developing strategies to secure Large Language Models (LLMs) and Generative AI applications. It provides a reference guide of the solutions available

LLM and Generative AI Security Solutions Landscape Read Post »

Resources, Initiatives

LLM and Generative AI Security Center of Excellence Guide

As generative AI technologies evolve and integrate into various aspects of business and society, the need for robust governance, security, and policy management becomes paramount. Establishing a Center of Excellence (COE) for Generative AI Security aims to bring together diverse groups such as security, legal, data science, operations, and end-users to foster collaboration, develop best

LLM and Generative AI Security Center of Excellence Guide Read Post »

Resources, Initiatives

Guide for Preparing and Responding to Deepfake Events

Deepfakes—hyper-realistic digital forgeries—have gained significant attention as the rapid development of generative AI has made it easier to produce convincingly realistic videos and audio recordings that can deceive even the most discerning viewers. While deepfakes are a powerful tool for social engineering, cybersecurity professionals do not need to turn to new detection technologies or intensive

Guide for Preparing and Responding to Deepfake Events Read Post »

Ask Sage, GenAI Security Advisor
Scroll to Top

OWASP AI Summit @ RSAC 2024 – AI Exchange