Basestructure.io

Build, Ship secure code faster.

Master the fundamentals of security engineering.

HAIAMM Framework Open Source OWASP Aligned EU AI Act Ready

From OpenSAMM to HAIAMM: A Decade in the Making

In 2015, we helped shape the future of OpenSAMM. A decade later, those hard-won lessons about security maturity evolved into something new—a framework built specifically for AI systems that work alongside humans.

Read the full story →

Who This Is For

If you're building, deploying, or securing AI systems, we built these tools for you.

🛡️

Security Leaders

CISOs and VPs who need to prove AI security ROI to boards—not just tool purchases and compliance checkboxes.

⚙️

Security Engineers

Teams building AI agents, LLM integrations, or agentic systems who need practical security guidance that actually works.

🏦

Regulated Industries

Fintech, healthcare, and enterprises facing EU AI Act compliance who need frameworks auditors trust.

🚀

Product Teams

Engineers shipping AI features who want lightweight, effective security practices—not heavyweight frameworks that slow you down.

We build tools for AI-Specific Security Threats

Traditional security frameworks weren't built for AI agents. We address the unique threats that emerge when AI systems operate with autonomy.

EA

Excessive Agency

AI systems granted permissions beyond what's necessary, creating attack surface and blast radius.

AGH

Agent Goal Hijacking

Manipulation of AI objectives through prompt injection, causing unintended actions.

TM

Tool Misuse

AI using available tools in ways that violate intended security boundaries.

RA

Rogue Agents

Autonomous AI behavior that deviates from expected patterns without detection.

Our Products

A complete ecosystem for assessing, building, and maintaining secure AI systems.

Framework v2.2

HAIAMM

Human-Assisted Intelligence Assurance Maturity Model

The first open-source framework for assessing AI security programs. Measure real effectiveness, not just checkbox compliance.

  • 12 practices across 6 security domains
  • 3 maturity levels (L1-L3)
  • 451 assessment questions
  • OWASP LLM & Agentic AI aligned
Tool Alpha

Verifhai

Interactive AI Security Mentor + CLI

Dual-tool ecosystem: Claude Skill for real-time security guidance during development, plus Python CLI for formal assessments.

  • 6 interactive security workflows
  • 12 ready-to-use security templates
  • AI-aware code review
  • Maturity scoring & tracking
DevOps New

VerifhaiDevOps

GitOps-Native Security Maturity Tracking

Track HAI security maturity through your CI/CD pipeline. YAML assessments, git history as database, markdown scorecards.

  • GitHub Actions integration
  • Automated validation & scoring
  • Git-based audit trail
  • Configurable quality gates

Open Source

All our core tools and frameworks are open source. Security through transparency.

verifhai-public

Complete HAI security toolkit with Claude Skill integration, Python CLI, and HAIAMM framework implementation.

Python / Markdown View Repository

verifhaidevops

GitOps-native security maturity tracking. YAML assessments, bash scripts, GitHub Actions.

Bash / YAML View Repository

hai-semgrep-rules

Custom Semgrep rules for detecting HAI-specific vulnerabilities: prompt injection, excessive agency, tool misuse.

owasp-haiamm-crosswalk

Complete mapping between OWASP LLM Top 10 2025, Agentic AI Top 10 2026, and HAIAMM practices.

Markdown View Repository

The HAIAMM Framework

The Human Assisted Intelligence Assurance Maturity Model A comprehensive maturity model designed specifically for AI capabilities.

Level 1

Foundational
Score: 0.5 - 1.4

Level 2

Comprehensive
Score: 1.5 - 2.4

Level 3

Industry-Leading
Score: 2.5 - 3.0
12
Security Practices
6
Domains
451
Assessment Questions
100%
OWASP Coverage

Our Philosophy

Outcomes Over Process

We measure what matters: Does your security actually work? Not just "Do you have a policy?" Real effectiveness, proven with data.

Open By Default

Security through transparency. All our frameworks, methodologies, and core tools are open source. Community-driven improvement.

Human Assisted Intelligence-Specific Focus

Building for the unique challenges of AI systems. Agent autonomy, prompt injection, tool misuse—threats that generic frameworks miss.

Start Building Secure AI Systems

Get started with our open source tools or reach out for enterprise support.