RiskRubric is Evolving
The RiskRubric.ai website is temporarily unavailable while Cloud Security Alliance prepares the next iteration of RiskRubric—an expanded AI risk assessment framework built for today's rapidly evolving AI ecosystem.
Built in Collaboration with Industry Leaders
RiskRubric is being developed in collaboration with leading organizations across AI security. Together, these organizations are helping advance a more transparent, evidence-based approach to evaluating AI systems.
PointGuard AI is a comprehensive AI application security and governance platform that helps enterprises discover, harden, and protect AI agents, models, and MCP infrastructure through runtime guardrails, zero-trust controls, red teaming, and continuous compliance oversight.
Deloitte Touche Tohmatsu Limited (DTTL) is a global network of professional services firms operating in 150+ countries. In Italy since 1923, Deloitte has 15,000 professionals, €1.7B+ in revenue, and provides Audit & Assurance, Technology & Transformation, Strategy, Risk & Transactions Advisory, Tax & Legal services.
Tumeryk is the Trust Infrastructure for AI. Its AI Trust Score™ and policy engine help organizations monitor, measure, and manage Agentic and Conversational AI in real time, ensuring security, safety, accuracy, and compliance across AI interactions.
What's Coming to RiskRubric
The new version will include:
- A multi-scanner ecosystem powered by independent evaluation partners: PointGuard AI, Deloitte, and Tumeryk.
- Expanded assessment coverage beyond AI Models to include MCP Servers.
- Modernized evaluation pillars addressing emerging operational and autonomous AI risks.
- A new Confidence Scoring model to provide greater transparency into assessment validation.
RiskRubric will continue advancing evidence-based AI security assessments while expanding visibility into modern AI systems and infrastructures.