OWASP GenAI Security Project
A global community-driven and expert led initiative to create freely available open source guidance and resources for understanding and mitigating security and safety concerns for Generative AI applications and adoption.
What’s New
OWASP GenAI Security Project – Solutions Reference Guide Q2_Q3’25
The OWASP GenAI Security Project – Solutions Reference Guide (Q2–Q3 2025) is a comprehensive, vendor-agnostic resource for organizations seeking to secure Large Language Models (LLMs) and
CheatSheet – A Practical Guide for Securely Using Third-Party MCP Servers 1.0
The Practical Guide for Securely Using Third-Party MCP Servers from the OWASP GenAI Security Project provides a detailed framework for safely deploying and managing external Model
OWASP GenAI Security Project Threat Defense COMPASS 1.0
The OWASP GenAI Security Project’s Threat Defense COMPASS consolidates AI threats, vulnerabilities, defenses, and mitigations into a unified AI Threat Resilience Strategy Dashboard. COMPASS enables organizations
OWASP Agentic AI Taxonomy in Action: From Theory to Tools
OWASP Gen AI Incident & Exploit Round-up, Q2’25
OWASP Gen AI Incident & Exploit Round-up, Q2 (Mar-Jun) 2025 About the Round-up This is not an exhaustive list, but a semi-regular blog where we aim
CyberRisk Alliance and OWASP Join Forces to Advance Application Security and AI Education Across the Cyber Ecosystem
New Strategic Partnership with OWASP and the OWASP Gen AI Security Project Includes Joint Content, Events, and Research Initiatives NEW YORK, NY, UNITED STATES, June 26,
GenAI Security Project, Agentic AI Summit, Europe
Hosted by the OWASP GenAI Security Project, December 10, 2025 — London, UK The Agentic AI Security Summit – Europe, organized by the OWASP GenAI Security
GenAI Security Project – UAE Summit/Hackathon
Join us in Dubai for the premier OWASP GenAI Security UAE Summit and Hackathon, bringing together thought leaders, researchers, and practitioners at the forefront of Generative
OWASP 2025 Global AppSec USA (Washington, DC)
From November 6–7, 2025, connect with over 800 hundred security experts, thought leaders, and practitioners. Be a part of something extraordinary at the OWASP Global AppSec
Affiliated Standards Organizations and Projects
Our Initiatives
Top 10 for LLM and GenAI
Key security risks for GenAI and LLM-based applications.
AI Threat Intelligence and Response
Tracks GenAI misuse by attackers and emerging threat patterns.
AI Security Governance
Best practices & frameworks for responsible GenAI program oversight.
Secure AI Adoption
Frameworks and policies for responsible GenAI program oversight.
Agentic App Security
Securing autonomous agents and multi-step AI workflows.
Data Security
Protects training and retrieval data from leaks and tampering.
Red Teaming & Evaluation
Testing GenAI systems through adversarial red teaming methods.
AI Security Solution Landscape
Tools and platforms to address top GenAI security risks.
What the Industry is saying
OWASP Gen AI Security Project Sponsors
Events
- Dec
- 10
- 2:00 PM PST
- Dec
- 10
- 7:00 PM PST
- Featured, In-Person
GenAI Security Project, Agentic AI Summit, Europe
Hosted by the OWASP GenAI Security Project, December 10, 2025 — London, UK The Agentic AI Security Summit – Europe, organized by the OWASP GenAI Security Project, is a
- Sep
- 17
- 7:31 PM PDT
- Sep
- 17
- 7:31 PM PDT
- In-Person
GenAI Security Project – UAE Summit/Hackathon
Join us in Dubai for the premier OWASP GenAI Security UAE Summit and Hackathon, bringing together thought leaders, researchers, and practitioners at the forefront of Generative AI security. This
- Nov
- 3
- 3:20 PM PST
- Nov
- 7
- 3:20 PM PST
- In-Person
OWASP 2025 Global AppSec USA (Washington, DC)
From November 6–7, 2025, connect with over 800 hundred security experts, thought leaders, and practitioners. Be a part of something extraordinary at the OWASP Global AppSec US Conference, OWASP’s
- Oct
- 9
- 8:00 AM PDT
- Oct
- 9
- 4:00 PM PDT
- Featured, Virtual
Gen AI Application Security & Risk Virtual Conference
Call for Papers – Closed Agenda Coming – August 29th Earn CPE credits while gaining critical insight into the future of AppSec Register Now About: As organizations are moving