OWASP/www-project-ai-security-and-privacy-guide

OWASP Foundation Web Respository

What it solves

The OWASP AI Exchange addresses the need for a clear, up-to-date reference on AI security and privacy. It gathers threats and controls in a living set of documents, so practitioners have access to the current state of the art without having to piece together scattered knowledge.

How it works

This project is a GitHub repository that renders the website at owaspai.org using Hugo as part of a CI/CD pipeline. The site’s search is powered by Pagefind, which runs after the Hugo build. You can test the site locally by running npm run test:site (or the individual build, search-index, and serve steps). The live site uses GoatCounter for privacy-friendly analytics—tracking which pages are read, not who reads them. Contributions are open, with instructions on the site.

Who it’s for

Security and privacy professionals, AI developers, researchers, and anyone interested in understanding AI risks and mitigations. The project thrives on input from experts worldwide, so it is also for those who want to contribute their knowledge to a collaborative effort.

Highlights

  • A living set of documents that evolves through community collaboration
  • Built with Hugo and Pagefind for a fast, searchable website
  • Privacy-friendly analytics via GoatCounter, with dashboard and weekly email reports
  • Easy local testing with npm scripts (no system Hugo required)
  • Open contribution process, welcoming feedback and expertise from all

Related

  • Project
  • Project
  • Project
  • Project