genai
SECURITY LAB
For AppSec teams

Build your team's AI security skills — and see where they're ready.

Give security engineers and developers hands-on practice with AI vulnerabilities. Assign learning paths, track demonstrated skills, and export training evidence for internal reviews and audits.

Team is $39/seat/mo, billed yearly, with a 4-seat minimum.

genaisecuritylab.com/team
OWASP skill matrix
6 engineers · OWASP LLM Top 10
LLM01LLM02LLM03LLM04LLM05LLM06LLM07LLM08LLM09LLM10
MR
Maya Rao
PN
Priya Nair
LO
Liam O'Brien
TB
Tomas Berg
JD
John Doe
JS
Jon Silva
Not startedAttemptedPassedPassed + fix held

Team skill matrix — sample data, not a real team.

The problem

AI features outran your review process

Features shipped without a security review

A chatbot, a summarizer, an agent with tool access — shipped by product teams who never had an AI threat model to work from.

Coverage isn't visible

You can name the OWASP LLM Top 10. But when your CISO asks which categories your team can actually handle, that's a different question.

It regresses every release

A guardrail that held last sprint fails after a prompt change. Coverage has to be provable on an ongoing basis, not once.

Who uses it

One plan for the people who break it and the people who build it

AppSec & security engineers

Test the AI features before release

Exploit live LLM, RAG, MCP and agent targets
A repeatable method for reviewing an AI feature
GSCE to certify the people who sign off
Developers shipping AI

Prevent AI vulnerabilities before they ship

Review AI-written diffs and catch what the assistant missed
Build guardrails scored on security and utility
Leave with an artifact you can open as a PR

Selling AI-app tests to clients?

Accountability

Assign scenarios, set due dates, and see who can complete them

Push curated paths or individual scenarios to your team with due dates. Completion lives in the workspace, and coverage exports as evidence for security reviews, board updates, and audits.

genaisecuritylab.com/team
Assignments
Offensive AI Security42%
Hardening RAG60%
MCP Boundary Testing15%
Capability

See OWASP skill coverage across the team

A live matrix of every member against the OWASP LLM Top 10. See which categories each engineer has passed, then assign reviews accordingly.

genaisecuritylab.com/team
OWASP skill matrix
6 engineers · OWASP LLM Top 10
LLM01LLM02LLM03LLM04LLM05LLM06LLM07LLM08LLM09LLM10
MR
Maya Rao
PN
Priya Nair
LO
Liam O'Brien
TB
Tomas Berg
JD
John Doe
JS
Jon Silva
Not startedAttemptedPassedPassed + fix held
Speed

Auto-graded completion, no manual review

Completion is graded on whether the fix actually holds, not on attendance — no manual review. Engineers see exactly where a fix falls short; leads see who has genuinely passed.

genaisecuritylab.com/verify
Auto-grade
Injection payloadBlocked
Role-play bypassBlocked
Encoded variantReview
Admin & procurement

Sign-in policy, roles, and billing

Sign-in policy

Google and GitHub sign-in, and a switch that turns passwords off so the whole team signs in with Google or GitHub only. SAML single sign-on (SSO) and SCIM user provisioning are Enterprise features, set up on request.

Role-based admin

Owners buy. Admins assign. Members take labs.

Reporting & evidence

Exportable coverage and completion for audits and reviews.

Seat management

Move a seat when someone leaves, without losing their records.

Billing

Pay by card, monthly or yearly, with an invoice for every payment. Invoicing against a purchase order is available on Enterprise, on request.

Need our security package? See Trust & security.
Certifications

Certify the skills, not the seat time

Practical exams against live targets, reviewed by an examiner, produce a verifiable certificate — assign attempts, track who's passed, and prove capability to clients and auditors.

Two credentials: GSCP & GSCE

GSCP — GenAI Security Certified Professional ($199) — is the intermediate hands-on exam. GSCE — GenAI Security Certified Expert ($399) — is the full exam: 75% GenAI (LLM, agentic, MCP tool servers), 20% web, 5% cloud, for pentesters whose scopes now include an LLM. Launch prices until 27 November, then $249 and $499.

Assign & manage attempts

Admins assign exams, approve requests, and see every score as it lands.

Verifiable certificates

Each pass an examiner releases issues a certificate with a public verification URL clients can check.

GSCP & GSCE bought separately · live targets, examiner-reviewed · GSCE includes three months of labs One-page overview for teams (PDF)
Labs tagged to the OWASP LLM Top 10

See how your team completes labs, proves fixes, and reports coverage

In 30 minutes: assign a lab, inspect one graded fix, and export the resulting coverage report.

Team is $39/seat/mo, billed yearly, with a 4-seat minimum.