OWASP
AI Bill Of Materials
(AIBOM) Project
Making AI Systems Transparent, Auditable, and Secure
What is an AIBOM?
An AI Bill of Materials, SBOM for AI, or AIBOM is a structured machine readable inventory of AI components such as models, datasets, agents tools, guardrails, and runtime elements along with evidence of origin, rights, integrity and evaluation. The goal of an AIBOM is to improve transparency and trust across the AI supply chain security. An AIBOM provides visibility, which enables organizations to inspect and analyze every component of their AI ecosystem. AIBOM upholds developing and existing risk management practices and processes. It helps identify vulnerabilities, assess AI-related security risks, and track model provenance from development through deployment. An AIBOM supports organizational efforts to meet regulatory requirements, such as the EU AI Act or NIST AI Risk Management Framework (RMF) advisory mappings.
Project Mission
The OWASP AIBOM Project establishes a comprehensive framework that
Identifies and Documents
- Model lineage and provenance
- Training datasets and data sources
- Model risks and vulnerabilities
- Dependencies and third-party components
Supports Secure AI Adoption
- Enables secure deployment across industries and geographies
- Provides risk assessment and mitigation strategies
- Facilitates compliance with emerging AI regulations
Bridges Communities
- Connects practitioners, researchers, regulators, and vendors
- Promotes open collaboration and knowledge sharing
- Establishes industry-wide standards and best practices
Why AIBOM Matters
As organizations increasingly rely on AI to make critical decisions and
automate processes, it becomes essential to understand
How models are built
Data lineage and quality
Risk factors
Compliance requirements
Strategic Collaborations
This initiative ensures alignment and collaboration with key OWASP projects and industry standards:
- OWASP CycloneDXÂ - Defining AIBOM format and attributes
- OWASP AI Exchange - Supporting organizational AIBOM adoption
- Industry Standards Bodies - Ensuring regulatory compliance
- Research Communities - Advancing AI transparency methodologies
Get Involved
We’re actively building our community and welcome contributions from:
Who Should Join
- Security Professionals - CISOs, Security Architects, Security Engineers
- AI Practitioners - Data Scientists, ML Engineers, AI Researchers
- Governance Leaders - Chief AI Officers, CTOs, Compliance Officers
- Regulators & Standards Bodies - Policy makers, industry standard organizations
- Developers & Vendors - Tool developers, platform providers
Current Initiatives
- Forming the core project team
- Welcoming community members to contribute
- Inviting sponsors and partners to accelerate this global initiative
How to Participate
For OWASP Members:
- Join us on OWASP Slack to collaborate directly on this initiative<
- Subscribe to project updates for the latest developments
- Attend working group sessions and contribute to ongoing discussions
For Everyone:
- Star this project to stay updated
- Contribute to documentation and best practices
- Help develop tools and reference implementations
- Spread awareness in your networks and communities
Our Blogs
Latest Posts
The India AI Impact Summit 2026 in New Delhi was more than just a…
The rapid adoption of artificial intelligence has introduced powerful capabilities to the…
A recent supply chain compromise affecting a widely used AI middleware dependency…
FEEDBACKS
What People Think About Us
The personalized approach, coupled with our team's expertise, consistently exceeds expectations, fostering long-lasting partnerships. Reading their reviews is a testament to the genuine impact we make on businesses, earning us loyalty and acclaim. Join our satisfied clients who have experienced success and innovation through our dedicated collaboration.
The personalized approach, coupled with our team's expertise, consistently exceeds expectations, fostering long-lasting partnerships. Reading their reviews is a testament to the genuine impact we make on businesses, earning us loyalty and acclaim. Join our satisfied clients who have experienced success and innovation through our dedicated collaboration.
The personalized approach, coupled with our team's expertise, consistently exceeds expectations, fostering long-lasting partnerships. Reading their reviews is a testament to the genuine impact we make on businesses, earning us loyalty and acclaim. Join our satisfied clients who have experienced success and innovation through our dedicated collaboration.
The personalized approach, coupled with our team's expertise, consistently exceeds expectations, fostering long-lasting partnerships. Reading their reviews is a testament to the genuine impact we make on businesses, earning us loyalty and acclaim. Join our satisfied clients who have experienced success and innovation through our dedicated collaboration.
