Securing AI systems.
Protecting organizations deploying AI.

From LLM vulnerability testing to AI governance compliance — we work alongside your security and AI teams to ensure your AI systems are safe, robust, and regulation-ready.

Not sure where your AI security gaps are? Book a free 2-hour AI Security Briefing. We'll assess your landscape and recommend a starting point.

Book Free Briefing →

For Organizations Deploying AI

Identify, test, and remediate security vulnerabilities in your AI systems. From chatbots to autonomous agents — ensure they're safe before and after deployment.

Stage 1 — Discover

AI Attack Surface Assessment

📅 1–2 days 📍 Remote 👥 CISO + AI/IT leads Free for qualified orgs

Complete inventory of your AI systems, risk classification per OWASP Top 10 for LLM & Agentic Applications, threat model mapping, and EU AI Act gap analysis — delivered as a priority-ranked remediation roadmap.

Complete AI system inventory across your organization
OWASP LLM + Agentic Top 10 risk classification
Threat model: prompt injection, data leakage, excessive agency
EU AI Act gap analysis with obligation timeline
Priority-ranked remediation roadmap
Executive briefing document for leadership
Who it's for: CISOs, CTOs, and security leads at organizations using or deploying AI — especially in regulated sectors (finance, healthcare, public admin, energy).
Stage 2 — Test

LLM Security Testing & Red Teaming

📅 2–4 weeks 📍 Remote / Hybrid 👥 Red team From €8,000

Comprehensive AI security testing combining automated vulnerability scanning (Garak, DeepTeam, Moonshot) with manual expert red teaming across all OWASP LLM Top 10 categories.

Automated scanning across all OWASP LLM Top 10 categories
Manual expert red teaming for nuanced attacks
Prompt injection testing: direct, indirect, multilingual bypass
Data disclosure & PII extraction testing
Hallucination & factual accuracy assessment
Harmful content generation testing (MLCommons AILuminate)
Component-level: RAG pipelines, system prompts, vector DBs
Compliance-mapped findings: OWASP, EU AI Act, NIST, AI Verify
Who it's for: Organizations with deployed or pre-deployment AI systems needing evidence-based security validation. Essential for regulated industries.
Stage 3 — Harden

AI Guardrails Architecture & Implementation

📅 4–8 weeks 📍 Hybrid 👥 Dedicated engineer €15,000 – €45,000

Production-grade guardrails for input validation, output filtering, agent permission boundaries, MCP security, and continuous monitoring — integrated into your CI/CD pipeline.

Input guardrails: prompt validation, injection detection, rate limiting
Output guardrails: PII masking, hallucination detection, policy enforcement
Agent guardrails: permission boundaries, kill switches, HITL
MCP security layer: trust framework, auth, audit logging
System prompt hardening & vector database security
Real-time monitoring dashboard & incident response playbooks
Who it's for: Organizations that have completed testing and need production-grade defenses. Critical for high-risk AI systems under EU AI Act.
Stage 4 — Monitor

Continuous AI Security Monitoring

📅 Ongoing 📍 Remote 👥 SOC analyst €2,000 – €8,000/mo

24/7 AI threat monitoring, weekly automated red team runs, monthly posture reports, quarterly deep-dive assessments, and incident response.

24/7 detection of adversarial attacks & data exfiltration
Weekly automated + periodic manual red teaming
Monthly security posture reports with trend analysis
Quarterly full manual re-engagement
Curated AI threat intelligence feed
Compliance maintenance: EU AI Act, NIST, emerging standards
Who it's for: Organizations with production AI systems needing ongoing assurance. Three tiers: Essential (€2K/mo), Professional (€5K/mo), Enterprise (€8K/mo).

For AI & Software Companies

Your AI product is your attack surface. We help you build secure-by-design LLM applications and prove their safety to enterprise customers and regulators.

Stage 1 — Assess

AI Product Security Audit

📅 2–3 weeks 📍 Remote (NDA) €12,000 – €30,000

Full OWASP Top 10 assessment of your AI product — architecture review, supply chain analysis, system prompt security, code-level vulnerability analysis, and enterprise readiness evaluation.

Full OWASP LLM + Agentic Top 10 assessment
Architecture review: RAG, agent workflows, MCP servers
Supply chain: model provenance, dataset integrity, plugins
System prompt security & injection resistance (15+ variants)
Competitive security benchmarking
Enterprise readiness report
Who it's for: AI startups, SaaS companies with AI features, and platform builders who need to ship secure products.
Stage 2 — Certify

AI Safety Certification Program

📅 4–8 weeks 📍 Hybrid €25,000 – €60,000

Multi-framework certification: Singapore AI Verify, EU AI Act conformity, NIST AI RMF alignment, ISO 42001 readiness — with audit-ready evidence packages and customer-facing trust docs.

Singapore AI Verify compliance across 11 governance principles
EU AI Act conformity preparation
NIST AI RMF alignment mapping
ISO 42001 readiness assessment
Benchmark certification package (Moonshot, MLCommons)
Customer-facing AI safety card & trust documentation
Who it's for: AI companies seeking third-party validation for enterprise sales, regulatory compliance, or international market entry.
Stage 3 — Integrate

Secure AI Development Lifecycle (AI-SDLC)

📅 4–6 weeks 📍 Hybrid €20,000 – €40,000

Security-first AI development framework integrated into your engineering workflows — automated testing pipeline, pre-commit hooks, model evaluation framework, and security champion training.

Automated testing pipeline (Moonshot + Garak in CI/CD)
Pre-commit hooks: prompt lint, injection test, output checks
Model evaluation framework for every update/fine-tune
AI-specific incident response playbook
Security champion training for engineering teams
Responsible disclosure program setup
Who it's for: AI companies that want security built into development, not bolted on after.

For Government & Public Sector

National-scale AI safety testing, governance frameworks, and capacity building for government agencies deploying AI systems.

Service G1

National AI Safety Testing Program

📅 3–6 months 📍 On-site + Remote Priced per engagement

End-to-end national AI safety program: system inventory, centralized testing infrastructure (Moonshot, AI Verify), custom benchmarks, multilingual red teaming, and cross-agency compliance dashboards.

National AI system inventory & risk classification
Centralized testing infrastructure deployment
Custom jurisdiction-specific safety benchmarks
Multilingual red teaming in national & minority languages
Cross-agency compliance dashboard
Procurement requirements for AI safety testing
Who it's for: National digital agencies, government CIOs, cybersecurity authorities, and AI governance bodies.
Service G2

AI Governance Framework Development

📅 2–4 months 📍 Hybrid Priced per engagement

Comprehensive national AI governance framework adapted from Singapore Model AI Governance and EU AI Act requirements — customized for your legal and institutional context.

National AI Governance Framework design
AI Risk Classification System
Testing standards & guidelines (modeled on IMDA Starter Kit)
AI procurement guidelines with safety mandates
AI Incident Response Framework
Interoperability mapping: EU AI Act, NIST, AI Verify, ISO 42001
Capacity building program for government staff
Who it's for: Government bodies establishing national AI governance or implementing EU AI Act at national level.

Additional Services

Specialized engagements for specific AI security needs — from MCP security to supply chain audits and custom benchmarks.

MCP Security Assessment

Security testing for Model Context Protocol server deployments — authentication, authorization, data isolation, scope enforcement, and trust boundary validation.

1–3 weeks · From €5,000

AI Supply Chain Security

Audit your AI model supply chain — model provenance, dataset integrity, fine-tuning data validation, plugin/tool dependency scanning.

2–4 weeks · From €10,000

AI Security Training & Enablement

OWASP LLM Top 10 workshops, hands-on red teaming bootcamps, and AI-SDLC implementation training for your team.

1–3 days · From €2,500/day

AI Incident Response Retainer

Pre-negotiated response capability for AI security incidents. Threat hunting, forensic analysis, containment, regulatory notification support.

Annual retainer · From €15,000/year

EU AI Act Compliance Advisory

Risk classification, documentation requirements, conformity assessment preparation, and timeline management for EU AI Act compliance.

2–6 weeks · From €8,000

Custom Benchmark Development

Domain-specific, jurisdiction-specific, or language-specific AI safety benchmarks with test dataset curation and platform integration.

4–8 weeks · From €12,000

Frameworks & Standards We Work With

Cross-framework mapping saves you from running separate compliance programs.

FrameworkSourceCoverage
OWASP Top 10 for LLM Applications (2025)OWASP Foundation10 critical LLM vulnerability categories
OWASP Top 10 for Agentic Applications (2025)OWASP Foundation10 critical agentic AI risk categories
AI Verify Testing FrameworkSingapore IMDA / AI Verify Foundation11 governance principles
EU AI ActEuropean CommissionRisk-based AI regulation (2024–2027)
NIST AI Risk Management FrameworkUS NISTGovern, Map, Measure, Manage
ISO 42001ISOAI management system standard
MLCommons AI Safety BenchmarksMLCommonsStandardized safety evaluation suites
MITRE ATLASMITREAdversarial Threat Landscape for AI Systems

Ready to secure your AI?

Organizations: begin with a free AI Security Briefing. AI companies: request a product audit. Government: contact us for a tailored national AI safety program.