Welcome to the OWASP FinBot CTF workstream under the OWASP GenAI Security Project.
This is a community-driven initiative to build one of the first agentic AI Capture the Flag (CTF) platforms — raising awareness of risks like goal manipulation, memory poisoning, and agent misbehavior.
🌐Live system: OWASP-FinBot-CTF.org
Build a fun, open-source, hands-on CTF that shines a light on the real security risks of Agentic AI — helping developers, researchers, and security proffesionals learn by doing.
Be the JuiceShop of Agentic AI 🧃🤖 — the go-to community resource where anyone can explore, break, and secure AI agents through engaging challenges.
We welcome contributors at all levels of experience!
Check out the available volunteer roles:
-
Join the conversation
- Sign up for OWASP Slack
- Introduce yourself in
#team-genai-asi-finbot
-
Apply to volunteer
- Fill out the Volunteer Application Form
-
Contribute
- Join weekly workstream call (meeting minutes), meeting details are pinned on Slack here
- Use slack channel for communication
#team-genai-asi-finbot - Read Process Guides
- Pick-up tasks to do, ask for help if you are stuck or something is unclear!
⏱ Time commitment: Flexible. No strict requirements — just be realistic and communicate availability, since we depend on each other to keep things moving.
- Main GitHub Repo (FinBot code): https://github.com/OWASP-ASI/finbot-ctf-demo
- OWASP GenAI FinBot Page: https://genai.owasp.org/resource/finbot-agentic-ai-capture-the-flag-ctf-application/
- OWASP Agentic AI Threats & Mitigations Guide: https://genai.owasp.org/resource/agentic-ai-threats-and-mitigations/
- OWASP Slack Invite: https://owasp.org/slack/invite
- Slack Channel:
#team-genai-asi-finbot - Google Drive Folder: OWASP FinBot CTF Workstream working docs
- Helen Oakley – Impact Co-Captain (initiator of the workstream, community connector, and mission & vision driver)
- Allie Howe – Keeper of the Spark (co-initiator of the workstream, sustaining the spirit of the mission and cheering on the community)
- Sai Modalavalasa – North Star Co-Captain (shaping the north star architecture while guiding technical vision)
- Abigail Dede Okley – Chief Cat Herder (project manager, keeping all the cats aligned and on track)
- Carolina Steadham - Guardian of Quality Realms (ensuring every feature meets its highest destiny, uncovering hidden glitches, and safeguarding the integrity of the workstream)
🙌 Thanks for stopping by — and we’d love to have you join us!