Built on OWASP AISVS v1.01
Get a scoped AI security baseline in under 5 minutes
Answer a few quick questions about your system and get a free, plain-English guide to securing your specific architecture.
- Completely free
- No sign-up
- Answers never leave your device
What it covers
The tool covers all 282 requirements of the OWASP AI Security Verification Standard (AISVS), and each one has a plain-English implementation guide. Browse the guides.
-
C1 · 13 requirements
Training data
Where training data comes from, and proof nobody tampered with it.
-
C2 · 12 requirements
Input validation
Stopping prompt injection and harmful input before it reaches the model.
-
C9 · 37 requirements
Agents and orchestration
Tools, approvals and limits for AI that takes actions.
How it works
Three steps from “where do we start?” to a security baseline you can share with your team.
-
Step 1 of 3
Pick a level
Choose the level of assurance your system needs: essentials, standard or advanced. These are AISVS Levels 1, 2 and 3. You decide; the tool does not score you.
-
Step 2 of 3
Describe your system
Tick what your AI does: generates content, searches documents, runs tools as an agent, is trained on your data, and so on.
-
Step 3 of 3
Get your baseline
See the matching requirements grouped by AISVS chapter. Adjust your answers, then copy, download or print the list. Treat it as a first pass, then review it against your own situation.
Who it’s for
Made for teams starting from near zero
For developers, product owners and security or risk staff who need to see quickly what to do to get to a much better place. No AI security expertise needed.
-
Private by design
Everything runs in your browser. No accounts, cookies, analytics or servers.
-
You set the level
Choose the level of assurance, guided by how serious a failure would be. No hidden scoring.
-
Take it with you
Copy or download your baseline as Markdown, import it into Jira as tasks, or print it to PDF.
What it isn’t
An accelerator, not a complete solution
The baseline covers the majority of what matters without being comprehensive. Use it to get the basics in place, then build on it.
-
It won’t make you an expert
It tells you what to do in plain English. It does not teach you AI security.
-
It doesn’t cover every permutation
The questions describe common kinds of AI system. An unusual design may need requirements the tool does not list.
-
It doesn’t know your organisation
It makes no adjustment for your sector, your contracts, the law that applies to you or the controls you already have.
-
It doesn’t replace a professional
If a failure would be serious, have someone qualified review your system. Your baseline will make that review quicker.
Ready to get started?
Answer the questions and have your baseline in just a few minutes. Curious how it works first? Read the methodology.