Sprints
Two weeks. Fixed price. You leave knowing where you stand.
Each sprint ends with written findings and a plan your team can act on. Pick the one that matches the question you need answered.
2 weeks · From $15K
AI Observability Sprint
For when you need to know what AI is doing across your company.
Book this sprintWhat you walk away with
- 01
A map of AI in use
Every tool, agent, model and provider we can observe, including shadow AI nobody approved.
- 02
What each one touches
Which data and systems each tool and agent can reach.
- 03
What it costs
AI spend, broken out by tool and provider.
- 04
Governance gaps and a roadmap
Where your policies don't cover real usage, ranked by what to fix first.
How we get there. Stakeholder conversations with the people who know where AI shows up in their work, plus analysis of observable usage.
2 weeks · From $15K
AI Security Sprint
For when you need to know where you're exposed.
Book this sprintWhat you walk away with
- 01
An assessment of your AI security posture
Covers the AI tools employees use, the agents connected to internal systems, and the product features that send data to models.
- 02
Ranked risks
Each risk rated by severity, so you know where to spend first.
- 03
A blueprint for your security program
The controls, owners and order of work to close the gaps.
How we get there. A review of how your company uses AI and where that use creates risk.
2 weeks · From $15K
Pentest Sprint
For when you need to know what a real attacker could do.
Book this sprintWhat you walk away with
- 01
Findings ranked by severity
Every issue we exploited or could exploit on the agreed target, including your AI features.
- 02
Reproduction steps
Enough detail for your engineers to see each issue for themselves.
- 03
Fixes
A recommended fix for every finding.
- 04
A coverage statement
What we tested and what we couldn't see, written down.
How we get there. We test an agreed target through the same inputs your users have. For AI features that includes prompt injection, tool misuse and attempts to reach data or actions the feature should not allow.
Every sprint
- Done by senior people. Our founders and senior security engineers do the work.
- Fixed scope and price. Two weeks, from $15K. Larger organizations get a scoped enterprise engagement.
- Fixes are separate. If you want help fixing what we find, that's its own project with its own scope, price and end date.