OWASP Top 10 Neocloud & AI Data Center Security Risks
A practical framework for identifying and reducing the most critical security risks in neoclouds and AI data centers.
Contribute to the project
The OWASP Top 10 Neocloud and AI Data Center Security Risks is a community-driven project. We welcome contributions from security researchers, infrastructure operators, cloud and data center providers, customers, vendors, and practitioners.
You do not need to be an OWASP member to contribute. Contributions of every size are welcome, from correcting a broken reference to proposing significant changes to the framework.
How to contribute
Open an issue to report an error, suggest an improvement, propose new content, or share supporting evidence.
Submit a pull request to improve risk descriptions, mitigations, attack scenarios, references, mappings, diagrams, or other project documentation.
Join the discussion in
#project-neocloud-ai-infrastructureon the OWASP Slack before beginning a substantial change.
What we are looking for
We especially welcome contributions that:
Review the accuracy and completeness of individual risks
Add credible research, incidents, CVEs, standards, or vendor documentation
Improve guidance for providers, operators, and customers
Add mappings to relevant security standards and frameworks
Improve diagrams, terminology, checklists, and examples
Identify emerging AI infrastructure risks for future releases
Contribution principles
Contributions should be:
Vendor-neutral
Evidence-based
Relevant to neocloud and AI data center infrastructure
Practical for defenders, operators, and customers
Accepted contributions will be reviewed publicly and credited in future project releases.
Slack