Write your awesome label here.

Which AI snakes live in your village?

A free field guide to AI security threats, with a defence card for each one. Built on the OWASP AI Exchange.
Free to use. Answer a few questions and see which snakes may live in your system. Leave your email to get your defence cards.

What you get:

Find your snakes

Answer a few questions about your AI system. See which threats are real for it, and why.

A defence card per snake

Five steps, from prevention to learning. Every control links to the OWASP AI Exchange.

Keep your card

Tick what you have in place. Save the card as a PDF, or come back in the same browser to update it.

The model in six steps

  1. Step 0Which snakes live here?Find the threats that are real for your system.
  2. Step 1ImmunityPrevent or slow down the attack by design.
  3. Step 2AntidoteLimit the effect now, without a redesign.
  4. Step 3Cut the head offStop the attack when it strikes.
  5. Step 4Warn the villageSearch, report and share what you found.
  6. Step 5Learn the markingsFeed what you learned back into design and tests.

Built on the OWASP AI Exchange

The snake model is our own invention. The threats and controls come from the OWASP AI Exchange, the free, open guide to AI security.

owaspai.org

A look inside

Six snakes in the field guide. Each one has a defence card you can tick and save.

Write your awesome label here.

Who it is for?

  • Security leads
  • IT and project leads
  • Risk and compliance teams
  • AI product owners

No coding needed. A basic idea of how AI systems are used in your organisation is enough.

Find your snakes

Look by habitat (how your AI system is built and used) or by markings (signs you have already seen). It takes a few minutes.

Get your defence cards

Leave your email. You go straight to your cards, and we also send you the link by mail.

Thank you!

By leaving your email, you get the link to your defence cards, a short mail series about AI security and the Corporate Revolutionary Academy newsletter (about one mail a month). You can unsubscribe at any time. Privacy policy

Questions

Is it free?

Yes. The field guide, your list of suspects and the defence cards are free. To open the cards, we ask for your email.

Do I need technical skills?

No coding needed. A basic idea of how AI systems are used in your organisation is enough.

What do you do with my email?

We send you the link to your defence cards and a short series of mails about AI security. We also add you to the Corporate Revolutionary Academy newsletter (about one mail a month). You can unsubscribe at any time with one click. Read our privacy policy.

Where are my ticks saved?

Only in your browser, in its local storage (it works like a cookie). We never see them. If you clear your browser data, your ticks are deleted. To keep a card, download it as a PDF. Read our cookie policy.

Does it test my system?

No. It is a thinking tool. It explains threats and defences. It never shows how to attack.


Made by Corporate Revolutionary Academy, an EXIN accredited training organisation. Built on the OWASP AI Exchange (owaspai.org), the free, open guide to AI security.

Want to go deeper? Join the EXIN AI Security Professional (AISP) course.