MOSAIC is coming to OWASP

[Rob van der Veer]

Dear global board,

As you may have heard, we convened key standardization organizations in DC two weeks ago, and established a coordination initiative called MOSAIC Multi-Organization Secure AI Coordination.

The communication platform the group decided on is GitHub, and since the OWASP AI Exchange has taken this initiative, and OWASP has built up a good name in AI security, we are going for an OWASP GitHub repo with the name MOSAIC.

More info: https://www.linkedin.com/posts/robvanderveer_on-april-21-2026-a-major-breakthrough-in-share-7454830488919281664-0Kja

I'd like you to be aware of this initiative because its impact is quite profound. OWASP is enabling collective coordination in the field, under its trusted open governance model.

To be clear:

- MOSAIC is not a collective - it is not a new identity

- MOSAIC is a coordination platform - lightweight

- MOSAIC is a first of its kind. What didn't happen for cyber security in general, is happening now for AI security

- The worst case scenario is that MOSAIC will be a map of initiatives in a standardized format, plus some issues to align on, such as terminology, with just a few initiatives. Great! The best scenario is that MOSAIC will be a thriving platform,  brokering for experts and initiatives - fostering alignment and achieving 'one voice', with many organizations connected.

We'll see.

For the repo, I am working with Starr to setup a new project, which is the correct procedure.  I'd like to ask you that when this project request is presented to you, to see how you can fastlane it. The reason is that the event has been more than 2 weeks ago, and I don't want any of the other organisations starting GitHub repos as an alternative. This is OWASP's window of opportunity and we should grab it.

Thanks.

Rob van der Veer

on behalf of the OWASP AI exchange

[Steve Springett]

Rob,

Thank you for leading this initiative and for keeping the board informed. MOSAIC is exactly the kind of coordinating effort that OWASP is well-positioned to have a leadership stake in, and the timing around AI security standardization makes this particularly significant.

On the project setup, this is operational, and OWASP staff are handling it.

From a board perspective, please do not hesitate to reach out if there is anything we can do to support the initiative, whether that is visibility, introductions, or anything else that would help MOSAIC gain traction with the broader community.

Looking forward to watching this develop.


Best,

— Steve

--
You received this message because you are subscribed to the Google Groups "Global-board" group.
To unsubscribe from this group and stop receiving emails from it, send an email to global-board...@owasp.org.
To view this discussion visit https://groups.google.com/a/owasp.org/d/msgid/global-board/CAJH_1%3DorvNu1cKRU6BgNSdWfxiA6-h34Q3renM0BC3XLH6Ya1g%40mail.gmail.com.

[Louis Griffith]

Thank you very much Rob!

RG

To view this discussion visit https://groups.google.com/a/owasp.org/d/msgid/global-board/dd7dffea-4d0b-4003-96e8-f8ae384b55d2%40Spark.

[Sam Stepanyan]

Hi Rob,

Thank you for the update and congratulations to you and the AI Exchange team on moving this forward!

This sounds like a very important opportunity for OWASP to support coordination across the AI security ecosystem. 

Once the news about the MOSAIC GitHub repo is published on LinkedIn I'd be happy to amplify it by liking and reposting it to my followers.

Thanks again for your continued leadership in this area!

Kind regards,
Sam

-- 
Sam Stepanyan
OWASP London Chapter Leader
OWASP Global Board Member
sam.st...@owasp.org
https://owasp.org/london
Follow OWASP London Chapter on Twitter/X: @owasplondon
"Like" us on Facebook: https://www.facebook.com/OWASPLondon
Watch video recordings of our events on YouTube: https://www.youtube.com/OWASPLondon

Consider giving back and supporting the open community by becoming an OWASP member today!