Donation candidate · Coalition for Secure AI

CoSAI Wizards

Six vanilla-web assessment tools for practitioners working with the CoSAI Shared Responsibility Framework, CSA AICM, OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS. Apache-2.0, no build step, no backend, no trackers, every answer stays in your browser.

License: Apache-2.0 Runtime: HTML + CSS + JS Dependencies: jsPDF (self-hosted)

This project is offered as a prospective contribution to the Coalition for Secure AI (CoSAI) under OASIS Open. Names and marks belong to their respective owners; CoSAI endorsement is not implied.

v1 · Production-ready wizards

Security posture

AI Security Controls Assessment

CoSAI AI SRF five-layer walkthrough (AI Business & Usage · AI Information · AI Application · AI Platform · AI Model Provider) with OWASP LLM Top 10 coverage, live scoring, priority-gap list, and PDF export.

wizards/security-controls/ PDF export

CSA AICM aligned

Controls Assessment (AICM variant)

Same five-layer engine, re-weighted against the CSA AI Controls Matrix v1.0.3 with an added EU AI Act risk-tier control. Useful for teams already mapped to AICM domains.

wizards/controls-assessment/ PDF export

v1 · Governance & discovery

AI Policy Pyramid

Build your AI governance hierarchy across the five SRF layers — adopt principles, policies, standards, guidelines, and baselines from a curated library or add your own. Cascade view shows what drives what; export to JSON or PDF.

wizards/policy-pyramid/ Library · PDF

v1 · Regulation discovery

AI Regulation Discovery Wizard

4-step scoping wizard that identifies which regulations and frameworks apply to your planned AI system — EU AI Act, GDPR, NIST AI RMF, ISO 42001, SR 11-7, FDA AI/ML, HIPAA, and more — with priority controls grouped by CoSAI AI SRF layer and PDF export.

wizards/regulation-discovery/ Discovery · PDF

v1.1 · Reference explorers

Layer Integration Matrix

Cross-cut view of who owns which security domain across business, information, application, infrastructure, and supply-chain layers — plus a tab that explains what the CoSAI SRF clarifies at each layer (V0.7).

wizards/layer-matrix/ Matrix · SRF clarity

CoSAI SRF Stress Test

Walk a real AI incident through the five-layer Shared Responsibility Framework and see where accountability holds and where it breaks down.

wizards/srf-stress/ Scenarios · Layers