LLM application security audit
Direct and indirect prompt injection, data exfiltration, guardrail bypass, context leakage. Architecture review and concrete adversarial testing.
For SMEs, mid-sized organisations and regulated entities that take risks seriously while most still ignore them. We work where expertise is scarce and where mistakes are costly.
An AI system in production is not an application like any other. Its attack surface includes its natural-language inputs, its tools, its memory and its model supply chain. We evaluate it the way an adversary would.
A specialty under construction. Our methods draw on the state of the art (OWASP LLM Top 10, MITRE ATLAS); we scope every engagement precisely and say so clearly when a test falls outside our current perimeter.
Five surfaces, evaluated the way an adversary would — not just the model, but everything around it.
Direct and indirect prompt injection, data exfiltration, guardrail bypass, context leakage. Architecture review and concrete adversarial testing.
Agents with tools, access and autonomy. We assess tool misuse, privilege escalation, unintended actions and the blast radius of a hijack.
A structured offensive campaign against your AI system and its environment, up to realistic business scenarios — not just lab cases.
Mapping your systems to the AI Act's risk levels, identifying applicable obligations and a compliance plan — the security angle, not just the legal one.
Third-party models, datasets, dependencies, downloaded weights. We assess poisoning, backdoor and unverified-provenance risks.
Encrypted data captured today can be decrypted tomorrow. Post-quantum migration is not a "later" project: for long-life secrets, the clock is already ticking.
A specialty backed by a published method (see Research) and NIST standards (ML-KEM, ML-DSA, SLH-DSA).
Migration time (Y) plus required secrecy (X), beyond the quantum horizon (Z), opens an exposure window.
Reading: migration (4 yrs) + required secrecy (10 yrs) = 14 years, 2 years beyond the quantum horizon (12). Those 2 years are already exposed to "harvest now, decrypt later". A cryptographic inventory is how you measure X, Y and Z on your own systems.
Which data will still matter in ten years? Which data travels today under cryptography that won't hold? We establish your real exposure to the quantum risk.
You can't migrate what you don't know you have. A four-pass mapping of the algorithms, keys, protocols and certificates in use across your organisation.
A migration plan toward standardised algorithms (ML-KEM, ML-DSA), sequenced by risk priority, compatible with your operational constraints and built for crypto-agility.
Open-source research within a legal, documented framework: due diligence, information leaks, brand abuse, incident investigation, building admissible evidence files.
For sectors where randomness is critical — gaming, lottery, finance, cryptographic applications. Statistical evaluation of random-number generators and their resistance to bias.