Skip to content
Consulting

Know your AI risk. Then fix it.

Senior security practitioners who find, test and fix the risks in how your company uses AI, with a fixed scope, a fixed price and a plan your engineers can act on.

Book a scoping callSee our services
Services

Three engagements, each with a clear end and a clear deliverable.

3 to 4 weeks

AI risk and compliance assessment

AI inventory · risk register · EU AI Act · ISO/IEC 42001 · India DPDP

When to call us: Your board, an auditor or a regulator is asking how the company uses AI, and nobody has the full picture.

We find every AI tool, app and agent in use across the company, including the ones IT never approved, work out what data each can see and change, and map your controls to the rules that apply to you.

What you get
  • Inventory of AI in use, sanctioned and unsanctioned
  • Risk register ranked by business impact, with an owner for each risk
  • AI use policy, control mapping and an evidence pack for auditors
  • A 90-day plan, and a one-page summary for the board
2 to 3 weeks

AI app security review

Threat modeling · AI red teaming · cloud and identity review

When to call us: You are about to launch a customer-facing AI app, copilot or agent, or one is already live.

We map how data and instructions flow through the system, then attack it the way a real adversary would: tricking it into ignoring its rules, pulling out data it should not share, and using its cloud access to reach further.

What you get
  • Map of your AI system and where it trusts outside input
  • Every successful attack, with the steps to reproduce it and its business impact
  • Ranked fixes your engineers can ship, and a free retest once they are in
Retainer, or one-off

AI incident response

Incident response retainer

When to call us: Something has gone wrong with an AI system, or you want someone on call when it does.

We help you contain it, find out what happened and what data was involved, and prepare what you tell customers, regulators and the board.

What you get
  • Senior responder on call within 4 business hours
  • Root cause and data-impact report
  • Fixes so the same thing cannot happen twice
How an engagement runs

Four steps, no open-ended billing.

  1. Step 1

    Scoping call

    30 minutes, free. We agree what to look at and what a good outcome is.

  2. Step 2

    Fixed-scope proposal

    A fixed price and end date within two business days. No open-ended billing.

  3. Step 3

    Work alongside your team

    Weekly check-ins. Anything urgent is raised the day we find it, not saved for the report.

  4. Step 4

    Readout

    A board-level summary for leadership and a ranked fix list for engineering.

Where a finding is something our products handle, we say so and show you how. Where it isn't, we tell you that too. You are never obliged to buy anything to act on our advice.

Not sure which one you need?

Tell us what you are about to launch, or what is worrying you. On a 30-minute call we will tell you which engagement fits, or whether you need one at all.

Book a scoping callSee our products