OWASP AI Exchange
Comprehensive open-source guide to AI security threats, controls and their mapping to standards, maintained as OWASP's input to ISO/IEC 27090, the AI Act standards and other bodies
A living, standards-oriented catalogue of AI security threats (over 200 pages) and controls organised by lifecycle and attack type, with explicit mappings used by ISO/IEC, CEN/CENELEC and ENISA; the reference for control-level AI security.
Contribute
Spot an error, or know a record we should add? Members can propose additions and submit corrections.
