AI Readiness Assessment
Can your organisation account for the AI it already runs?
Thirty statements. Six areas. About twenty-five minutes. The result is a board-ready report that shows where AI is governed and where it is not.
Free. A verified work email is required.
What it measures against
Each statement maps to an item in the OWASP Top 10 for LLM Applications (2025) or the OWASP Top 10 for Agentic Applications (2026), and to a practice in the OWASP AI Maturity Assessment (AIMA).
These are open, public frameworks. They apply wherever you operate, and sit alongside your own regulator's expectations.
The six areas
- 01Visibility
- 02Data reach
- 03Identity and privilege
- 04Output integrity
- 05Agents and memory
- 06Governance
What you receive
- An overall position
- Foundational, Developing, Managed or Advanced, in plain words.
- An executive summary
- What could go wrong, what to do first, and one request for the board.
- Maturity by pillar
- Protect, Utilize and Govern, against the four stages.
- Findings by domain
- Each finding cites the OWASP Top 10 item and OWASP AIMA practice behind it.
- A board summary PDF
- A short, confidential document to put in front of a risk committee.
Your answers
Your answers and results are visible only to you and X2A's assessment team. X2A does not share them with other organisations.
The report reflects your own answers. It is not an audit opinion. Privacy Notice