AI Defense Stack

AI governance, risk & compliance

AI Verify: open-source AI governance testing toolkit

AI Verify is an open-source AI governance testing toolkit from AI Verify Foundation. It is released under the Apache-2.0 license and is offered as: Self-hosted.

  • Last reviewed
Visit AI Verify (opens in a new tab) Documentation (opens in a new tab) Source code (opens in a new tab)
Open sourceApache-2.0 Layer 1: Governance and risk

Best for

Teams that want a free, self-hosted toolkit to test tabular or image classification and regression models and produce an assessment report

Consider instead if

  • You need an AI inventory, risk workflows and approvals across the organization rather than model tests. See Credo AI or Saidot.

What AI Verify does

AI Verify is an open-source AI governance testing toolkit from the AI Verify Foundation. The user guide describes a portal where you upload a dataset and a model, run technical tests for fairness, explainability and robustness, fill in process checklists and build a report from templates that can be exported as PDF. The README says the tests cover supervised classification and regression models on tabular and image datasets, and that the toolkit does not guarantee a system is free from risks, biases or safety issues. It installs with Docker or Kubernetes under the Apache-2.0 license. The Foundation's site lists crosswalks from its testing framework to the NIST AI RMF and ISO/IEC 42001, but none to the EU AI Act. It is a testing and reporting toolkit, not an inventory or approvals system.

This summary is our own wording of the sourced facts on this page.

Key facts

Each value links to the page that states it, with the date we checked it.

Vendor
AI Verify Foundation Source, checked October 21, 2026: github.com (opens in a new tab)
Status
Active Source, checked October 21, 2026: api.github.com (opens in a new tab)
Open source
Yes: Apache-2.0 Source, checked October 21, 2026: github.com (opens in a new tab)
Repository
github.com Source, checked October 21, 2026: github.com (opens in a new tab)
GitHub stars
103 as of October 21, 2026 Source, checked October 21, 2026: api.github.com (opens in a new tab)
Latest push
March 23, 2026 Source, checked October 21, 2026: api.github.com (opens in a new tab)
Latest release
March 23, 2026 Source, checked October 21, 2026: api.github.com (opens in a new tab)
Deployment
Self-hosted Source, checked October 21, 2026: aiverify-foundation.github.io (opens in a new tab)
Pricing model
Free Source, checked October 21, 2026: github.com (opens in a new tab)
Website
aiverify-foundation.github.io Source, checked October 21, 2026: aiverify-foundation.github.io (opens in a new tab)
Documentation
aiverify-foundation.github.io Source, checked October 21, 2026: aiverify-foundation.github.io (opens in a new tab)
API reference
Not documented in the sources we checked
Quickstart
aiverify-foundation.github.io Source, checked October 21, 2026: aiverify-foundation.github.io (opens in a new tab)
Security page
github.com Source, checked October 21, 2026: github.com (opens in a new tab)
Attestations or disclosure
Private GitHub security advisory for vulnerability reports, acknowledged within the next working day Source, checked October 21, 2026: github.com (opens in a new tab)

Capabilities

As documented by the vendor or project. The tag is our label from a controlled vocabulary.

Where AI Verify fits in our AI security layers

Our analysis

Our editorial model, not a standard. The primary layer follows the category, except for tools whose main documented job is detection and response; other layers rest on a capability the sources document. How the model works.

AI security layers that AI Verify covers, with the role, how each applies and what it rests on
LayerRoleHow it appliesBased on
L1 Governance Governance and risk Primary Decide which AI uses are allowed, give each an owner, assess its risk and keep the evidence an auditor or regulator will ask for. Follows its category, AI governance, risk & compliance
L4 Testing Testing and red teaming Also covers Documents fairness and explainability tests for AI models, which is testing work. Runs technical tests for fairness, explainability and robustness from a portal or the command line

OWASP LLM Top 10 mapping

Our analysis

The risk list is OWASP's (Top 10 for LLM Applications, 2025). The mapping is our analysis, and each row rests on a capability the sources document.

No OWASP LLM risk is mapped to this tool in our analysis.

Not mapped in our analysis: LLM02, LLM04, LLM06, LLM09. These are risks we expect tools in this category to cover; the sources we checked do not document a matching capability.

Alternatives and related tools

More in AI governance, risk & compliance, ranked within the category by Coverage Score.

Holistic AI

Holistic AI

Commercial
  • SaaS

A commercial platform that finds AI systems, tests their risk and maps controls to regulations.

Best for: Enterprises that want AI discovery, automated testing and regulation mapping in one governance platform, including a private single-tenant cloud option

Coverage Score 55 out of 100
  • LLM02 Sensitive Information Disclosure
  • LLM06 Excessive Agency
  • LLM09 Misinformation

Reviewed

Credo AI

Credo AI

Commercial
  • SaaS
  • Self-hosted

A commercial AI governance platform for AI inventory, risk assessment and policy mapping to regulations.

Best for: Enterprises that want one system of record for AI use cases, vendors and policy packs, with a self-hosted option for private environments

Coverage Score 54 out of 100
  • LLM06 Excessive Agency

Reviewed

OneTrust AI Governance

OneTrust

Commercial
  • SaaS

A commercial OneTrust product for AI inventory, risk assessments, policies and runtime monitoring.

Best for: Organizations that want AI governance workflows alongside other OneTrust privacy and risk products, with templates for the EU AI Act, NIST AI RMF and ISO 42001

Coverage Score 46 out of 100
  • LLM02 Sensitive Information Disclosure
  • LLM06 Excessive Agency

Reviewed

AI Verify FAQ

Is AI Verify open source?

Yes. It is released under the Apache-2.0 license and the source is on GitHub in the aiverify-foundation organization.

What kinds of models can AI Verify test?

The README says the technical tests cover supervised learning classification and regression models on most tabular and image datasets. It also says the toolkit does not guarantee that a system is free from risks, biases or safety issues.

How do I run AI Verify?

The Getting Started page recommends Docker, with a Kubernetes guide as an alternative. After installation the portal opens on localhost, and the user guide says tests can also be run from the command line.

Does AI Verify map to the NIST AI RMF, ISO/IEC 42001 or the EU AI Act?

The AI Verify Foundation's site lists crosswalks from its testing framework to the US NIST AI RMF and ISO/IEC 42001:2023, and none to the EU AI Act. The README calls AI Verify consistent with governance frameworks from the EU, OECD and Singapore, and says it does not guarantee a system is free from risks, biases or safety issues.

Key facts you can cite

We have no commercial relationship with AI Verify Foundation.

Sources & last reviewed

Last reviewed . We compile from the vendors' own public pages and repositories and we do not run the products. Source links open in a new tab. Found a mistake? Report a correction.