Workspace
Evaluation Packs
TL;DRCurated requirement sets per Domain, distilled from industry-standard security frameworks.
An Evaluation Pack is a researcher-curated starter set of requirements for a Domain. It exists so you do not have to build an evaluation from a blank page: load the pack and your run starts with the capabilities that matter in that market.
What a pack provides§
An Evaluation Pack is a bundle of capability requirements: documented catalog features that our research ties to the security outcomes buyers need to evaluate for. Because the seeded rows use the catalog's own vocabulary, the matching system can score every one of them automatically against every listing.
A seeded row is a normal requirement. Reprioritize it, rename it, or remove it; the evaluation owns its requirement set, the pack claims no special authority once loaded.
Distilled from industry-standard frameworks§
Pack contents are distilled from published security frameworks. The live AI Security pack, for example, draws on the OWASP LLM Top 10, the NIST AI RMF, and MITRE ATLAS. Behind each pack sits a curated map from the outcomes those frameworks describe to the documented features that cover them, and the pack seeds the features that map targets. The curation is editorial work, maintained by us and reviewed as the frameworks and the catalog evolve. The map is the one piece we do not publish row by row, because it would hand vendors a recipe of exact features to claim; what a pack seeds is visible in full when you preview or load it.
Optional by design§
Packs are libraries that Security Stack makes available to workspace users. You can preview a pack's contents before loading it, load it when you create the evaluation or later from the Requirements stage, and remove it again. An evaluation built entirely from your own requirements works the same way and ranks the same way.
Packs are built one Domain at a time. AI Security is live today, with more in the pipeline, based on demand. In a Domain without a live pack, you start evaluations from your own requirements.