How to meet it
OWASP AISVS v1.01
Monitoring, Logging & Anomaly Detection · Detection and Alerting
Track token use per user and team
Verify that token usage is tracked at granular attribution levels including per user, per session, per feature endpoint, and per team or workspace.
OWASP AISVS v1.01, requirement 12.2.5
In plain English
Track token use per user, session, feature and team, so unusual consumption stands out and costs can be traced.
What good looks like
- Token counts are logged with user, session, feature and team.
- Dashboards and alerts use them.
- Unusual spikes trigger review.
How teams usually do it
- Attribution fields in the shared log schema, plus usage dashboards.
Evidence an auditor would accept
- Dashboards and sample alerts.
Common mistakes
- Tracking only the total monthly bill.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.