Tools for download and use, including spreadsheets, threat guides etc.
The OWASP GenAI Security Project Crosswalk is an open-source resource that connects OWASP GenAI security risks to established industry security, governance, and compliance frameworks. It maps 51 GenAI vulnerabilities across four source lists to controls in 25 frameworks, including NIST, ISO, MITRE ATLAS, the EU AI Act and others. Organizations can use the crosswalk to […]
GenAI Security Industry Framework Crosswalk Read Post »
Widescale adoption of AI agents depends on trust, and trust requires transparency and control. Enterprises cannot rely on black-box agents operating across cloud, SaaS, on-premises and endpoint environments. Agents must be inspectable, traceable and instrumentable—providing visibility into what they are, what they can access, what they did and why, and the ability to control their
Agent Control Standard (ACS) Read Post »
The OWASP AIBOM Generator is an open-source tool designed to enhance AI supply chain transparency and security by generating AI Bills of Materials (AIBOMs) — also known as AI Software Bills of Materials (AI SBOMs), ML-BOMs, or SBOMs for AI. The tool supports AI models hosted on Hugging Face and produces output in CycloneDX format,
OWASP AIBOM Generator Read Post »
The OWASP GenAI Security Project’s Threat Defense COMPASS consolidates AI threats, vulnerabilities, defenses, and mitigations into a unified AI Threat Resilience Strategy Dashboard. COMPASS enables organizations to evaluate everything from external adversaries using AI tools to internal deployments of Microsoft Copilot, Google Gemini, and proposed GenAI or Agentic projects. Designed for iterative use, COMPASS serves
OWASP GenAI Security Project Threat Defense COMPASS 1.0 Read Post »
