How to meet it
OWASP AISVS v1.01
Model Behavior, Output Control & Safety Assurance · Source Attribution & Citation Integrity
Watermark generated media
Verify that generated media is watermarked to prove it was AI-generated.
OWASP AISVS v1.01, requirement 7.4.4
In plain English
Mark generated images, audio and video so they can be identified as AI-generated.
What good looks like
- Generated media carries a watermark or signed provenance data.
- The method survives common edits such as resizing and compression.
- There is a way to check for the mark.
How teams usually do it
- Content credentials using the C2PA standard.
- Provider watermarking features where available.
Evidence an auditor would accept
- Configuration and a sample check of generated media.
Common mistakes
- Using metadata alone, which is stripped by most sharing platforms.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.
