OSTIF published a responsible-AI policy for open-source security engagements, requiring human oversight, disclosure of AI use, safeguards for sensitive project data, and sandboxing and logging when AI agents are used in audits or research.
OSTIF AI Use in Security Research Policy
OSTIF published a responsible-AI policy for open-source security engagements, requiring human oversight, disclosure of AI use, safeguards for sensitive project data, and sandboxing and logging when AI agents are used in audits or research.
Source: Ostif