DVAP v1.0.0 - Initial Release
First public release of DVAP - Damn Vulnerable AI Platform.
15 AI security labs covering OWASP LLM Top 10 and MITRE ATLAS. 100% local, Docker-first, no cloud required.
What is included
- 15 vulnerable labs (Prompt Injection, RAG Poisoning, Multi-Agent, MCP Security, and more)
- Benchmark engine for local LLMs (Llama, Qwen, Gemma, Mistral)
- CTF framework with 31 flags across 15 labs
- Research Workspace with full prompt and trace recording
- AI-SOC real-time event logging
- Report generation mapped to OWASP LLM Top 10 and MITRE ATLAS
Quick Start
git clone https://github.com/sonuoffsec/DVAP
cd DVAP
cp .env.example .env
docker compose up -d