We Defined an AI Security Standard: AASS v1.0, We Don't Sell Security, We Define It
TL;DR
OWASP defined the Top 10 web security threats. CVSS defined how to score vulnerabilities. Lighthouse defined how to measure web performance.
Nobody defined: "What's your organization's overall AI security + visibility + data protection score?"
So we did.
AI Application Security Standard (AASS) v1.0, three dimensions, one score:
AI Trust Score = AVS × 0.30 + PDS × 0.35 + ADP × 0.35
| Dimension | What it answers | Checks |
|---|---|---|
| AVS (AI Visibility) | Can AI find you? | about 85 checks (30 SEO + 29 AEO + 25 AAO, measured 2026-09-28) |
| PDS (Prompt Defense) | Is your AI hardened? | 12 attack vectors |
| ADP (Data Protection) | Are you leaking PII to AI? | 10 types, 21 patterns |
All open source. All free. All deterministic.
Note added 2026-09-28: the table was written with the numbers from the AASS v1.0 release in April 2026. The UltraProbe web version today (measured 2026-09-28) runs about 30 SEO, 29 AEO and 25 AAO checks in its website scan, and Prompt Security covers 25 attack vectors. Checks change between versions; cite the version and date when quoting.
Note added 2026-10-04: the AVS row now uses the measured counts instead of the release-time ones: about 85 checks (30 SEO + 29 AEO + 25 AAO, measured 2026-09-28). At release the row gave a single total of 92. The PDS and ADP rows still show the April 2026 figures.
Full spec: github.com/ppcvote/avs-standard/spec/AASS-v1.0.md
Free scanner: ultralab.tw/probe
Ultra Lab: "We don't sell security. We define it."
FAQ
What is AASS (AI Application Security Standard)?
AASS is an open standard defined by Ultra Lab. Version 1.0 turns three dimensions into one score: AI visibility (AVS), prompt defense (PDS) and AI data protection (ADP), answering "what is an organization's overall AI security, visibility and data protection score?"
How is the AI Trust Score calculated?
AI Trust Score = AVS × 0.30 + PDS × 0.35 + ADP × 0.35. AVS asks whether AI can find you, PDS asks whether your AI system can withstand attacks, and ADP asks whether you are giving AI data it should not have.
What does each AASS dimension measure?
AVS combines SEO, AEO and AAO; PDS measures defense coverage across attack vectors; ADP detects 10 types of PII across 21 patterns. All three dimensions are deterministic checks.
Are the AASS scanning tools free?
Yes. All AASS tools are open source and free. You can scan a website for free with UltraProbe (ultralab.tw/probe), and the full spec is on GitHub at ppcvote/avs-standard.