Branding

Branding and Logo Usage Guidelines

Below you find branding guidelines and the logos user to refer to the OWASP Top 10 for LLM and Generative AI application security project. This is an extension of the OWASP Foundations branding guidelines (read these first) which also apply to this project.

Statement of Non-Endorsement

OWASP GenAI Security Project does not endorse any product, services, or tools. The following disclaimer/About OWASP text can be used in projects or press releases that reference external products, services, or tools. We ask that the community look out for inappropriate uses of the OWASP brand, including the use of our name, logos, project names, and other trademark issues.

Branding Transition

This project began as the OWASP Top 10 List for LLM and GenAI, but rapidly expanded to address the broader set of issues facing Generative AI security and as such has been rebranded to the OWASP GenAI Security Project, with an updated set of logos and naming to replace any use of the previous branding, naming or logos. The OWASP Top 10 List for LLMs and GenAI will continue as an Initiative within the larger OWASP GenAI Security Project. The project will be migrating all assets to the new branding logos and naming conventions.

The following logo and it’s derivatives are discontinued from use:

Project and Asset Naming and Referencing Guidelines

Below are the guidelines for referencing the project, project initiatives, project materials or assets in any publication either for public presentation and inclusion and reference in other materials under the projects appropriate OSI license. This includes but is not limited to whitepapers, presentations, videos, webinars, signage, research papers, podcasts, websites, etc.

The project name must be included in all publications, or references to the project either in text or through the use of the approved project logos. The following reference guide provides the specific naming, usage and reference guidelines for the OWASP Foundation, Project, Initiatives and Assets.

Naming, Reference and Usage Guide:

General Hierarchy

Below is the general hierarchy applied to naming and referencing the OWASP Foundation, The Project, The Initiative, and Project Elements and Assets.

- The OWASP Foundation
  - The Project
    - Initiatives
      - ex: AI Security Solutions Landscape, Top 10 List
        Initiative Assets
        ex: Deep Fake Response Guide

The Foundation

Primary: The OWASP Foundation
Alternative: The Open Worldwide Application Security Project, Foundation
Alternative #2: OWASP.org

The Project Name

Primary: OWASP GenAI Security Project
Alternative: OWASP Generative AI Security Project
Abbreviations: OWASP GAISP, OWASP GASP, GENAI.OWASP.ORG
– Logos can be used in place of Text

Project Initiatives

Project initiatives must include a reference to the Project plus the reference to the approved Initiative Name. See below acceptable and improper uses.

Primary: OWASP GenAI Security Project – Red Teaming Initiative
Alternative: OWASP GenerativeAI Security Project – Red Teaming Initiative
Alternative#2: Red Teaming Initiative, OWASP Top 10 for LLM & Gen AI Project

Improper Usage:

Example #1: OWASP Red Teaming Initiative
Example #2: Red Teaming Initiative

“OWASP” alone cannot be used to preface a project initiative, as it creates
confusion in governance differences between the OWASP Foundation Projects,
and the OWASP GenAI Project Initiatives.

Project Assets

Project asset naming must include The Project and The Initiative in the sub-head or sub title of the document. Project assets must also include the full project and initiative names in their first usage in a text document, inclusion in slides and other written materials. Abbreviations and alternative uses may be used thereafter in the document.

Example Title: LLM Exploit Generation; Claude, DeepSeek, OpenAI
Example Sub-title: OWASP GenAI Security Project – Threat Intelligence Initiative
Alternative 2-line Sub-title:
OWASP GenAI Security Project
Threat Intelligence Initiative

License Attribution and Third Party Referencing

All resources published by the project are published under Creative Commons and OSI approved open source licenses. All third party use in whole or in part must include a reference to the original work as well as a link to the source document or materials.

References to assets must include at a minimum both The Project Name along with The Asset Title. The reference must include an accompanying link to the source assets hosted on the https://genai.owasp.org website, in accordance with the asset’s OSI license. Any questions on usage guidelines can be posted to the #team-genai-outreach slack channel.

Logos

There are two approved Logos for the project. These are available in a stacked and horizontal version. Appropriate colors are either White or Black. These logos cannot be reconfigured in any way or changes made to colors.

A zip file with the Logos can be found here.