AI Security Testing Cheat Sheet
AI Security Testing Cheat Sheet
A practical methodology for testing LLM apps, RAG pipelines, AI agents, and MCP tools — grouped by where issues surface, with controlled payloads and a result tracker you can export as findings.
- OWASP LLM Top 10 · 2026
- RAG pipelines
- AI agents
- MCP tools
Run these techniques against live targets
Each technique page links to labs: deliberately vulnerable AI apps you attack in the browser, graded automatically. Free labs come with a free account, no card needed.
How it works
Every section targets a place where untrusted content or model output can cross a trust boundary. Work the checklist by signal — the observable proof a technique worked — not by whether a prompt sounds clever.
The signal map
Where issues surface, input to output. Start anywhere — each stage links to its sections.
Risk by capability
A public text-only chatbot and an agent with write, email, or admin tools are not the same test — scope effort to what the AI can actually reach or do. See the full risk-by-capability table on Attack surface mapping →