Scorecard
AI Product Security Assessment for organizational benchmarking, evidence packs, and remediation roadmaps.
Benchmark your program across 14 domains. Identify capability gaps, track maturity over time, and generate evidence for customers and auditors.
Coverage
14 AI Product Security domains
Output
Evidence packs and remediation roadmap
Maturity model
Ad Hoc to Adaptive
Public use
Customer, board, and audit support
What the scorecard produces
Why score
Benchmark your program before customers, auditors, or regulators ask.
The scorecard turns AI security into a repeatable assessment and a practical reporting system.
Map your AI product security posture before customers, auditors, or regulators ask
Identify domain gaps with per-domain scoring, not just a single number
Track maturity over time with repeatable, comparable assessments
Generate evidence packs for sales, compliance, and board reporting
Maturity model
Five maturity levels from Ad Hoc to Adaptive.
Badges are issued at Managed and above. The scorecard helps teams understand where they are, what changed, and what to do next.
01
Ad Hoc
0.0–1.5
02
Repeatable
1.5–2.5
03
Managed
2.5–3.5
badge eligible04
Measured
3.5–4.5
badge eligible05
Adaptive
4.5–5.0
badge eligibleAssessment domains
Six domain groups cover the 14 underlying control areas.
The grouping is designed for readability and reporting. The underlying domains remain visible so the scorecard is easy to audit and explain.
Inventory & Architecture
3 domains
What AI systems exist, how they're connected, who controls them, and where the trust boundaries are.
Adversarial Testing
3 domains
Whether adversarial inputs, manipulation, and prompt injection are modeled, tested, and measured over time.
RAG & Data Authorization
3 domains
Whether retrieval systems enforce proper authorization, and whether data exposure is controlled end to end.
Agentic Permissions
3 domains
Whether agentic systems are constrained to the actions they need, with proper guardrails on tool use.
Detection & Incident Response
3 domains
Whether AI systems produce actionable telemetry, and whether teams can detect and respond to AI-specific incidents.
Governance Evidence
3 domains
Whether AI security is documented, auditable, and integrated into delivery — not just asserted.
Next step
Run the scorecard and turn the results into evidence.
Free. No account required. Under 30 minutes. Results available immediately.
AIPSA credentials confirm completion of a scoped assessment, certification, lab path, or evidence review. They do not certify that any product, organization, or system is free of vulnerabilities.