CoSAI is an OASIS Open Project and is an open ecosystem of AI and security experts from industry leading organizations dedicated to sharing best practices for secure AI deployment and collaborating on AI security research and product development. For more information about CoSAI, visit our project website.
To learn more about how CoSAI is governed, who our sponsors are, and who is serving on our Project Governing Board and Technical Steering Committee, check out the OASIS Open Project repository.
This workstream focuses on enhancing AI security by addressing the challenges of third-party model risks, provenance, and AI application security. It builds upon widely recognized security frameworks like the SSDF and SLSA, extending them for AI development. WS1 GitHub repository WS1 mailing list WS1 meeting calendar
The goal of this workstream is to develop a defender’s framework to identify needed investments to address the security impacts of AI use by business applications, attackers, and defenders as well as mitigations techniques and best practices. The Defender’s framework aims to scale investments and mitigation strategies with the emergence of pivotal offensive cybersecurity advancements in AI models. WS2 GitHub repository WS2 mailing list WS2 meeting calendar
Workstream 3 contributors are working to develop a security-focused risk and controls taxonomy, checklist, and scorecard to guide practitioners in readiness assessments, management, monitoring, and reporting of their AI products, services, and components. WS3 GitHub repository WS3 mailing list WS3 meeting calendar
The goal of this workstream is to research and develop secure design patterns for AI-based agentic systems including updates to AI usage threat models, conceptual high-level secure design pattern(s), impacts to secure infrastructure design, and other agent integration and use based needs. WS4 GitHub repository WS4 mailing list WS4 meeting calendar
If you want to start contributing to CoSAI, please see our onboarding information for new contributors. Here's a link to the CoSAI workstream meeting calendar.
- Establish Risks and Controls for the AI Supply Chain
- Signing ML Artifacts: Building towards tamper-proof ML metadata records)
- Preparing Defenders of AI Systems
- AI Incident Response Framework
- AI Shared Responsibility Framework
- Model Context Protocol (MCP) Security
- Agentic Identity and Access Management
Technical participation is free and open to all developers. That’s why CoSAI relies on a core group of stakeholder organizations whose financial commitment ensures that the initiative stays on track and receives the resources it needs to succeed. Learn more about the benefits of becoming a member of the Coalition for Secure AI here.