65 / 70 · 07 Security Testing for AI Apps · Building a Comprehensive AI Security Testing Program← prev⊞ allnext →☰ Read as one page
11.2Security Test Metrics Dashboard
Track these metrics to measure the effectiveness of your security testing program:
| Metric | Target | Measurement Frequency |
|---|---|---|
| Prompt injection block rate | > 99% | Every deployment |
| Jailbreak resistance rate | > 95% | Weekly |
| PII leakage incidents | 0 | Continuous monitoring |
| SAST findings (critical) | 0 unresolved | Every commit |
| Dependency CVEs (critical) | 0 unresolved | Daily scan |
| Time to remediate critical finding | < 24 hours | Per finding |
| Red team findings per quarter | Tracked (not targeted) | Quarterly |
| Bias score variance | < 0.1 | Monthly |
| Compliance test pass rate | 100% | Every deployment |
| Mean time to patch ML dependency CVE | < 7 days | Per CVE |