Baseline audits your fiduciary and your clients can read: 22 controls scored with severities and remediation steps. AI assistants tested against a six-probe injection battery before they meet your customers. Monitoring that writes incident ledgers, not excuses.
Identity, network, data, application, AI, operations and Swiss-legal families. Every fail or gap ships with a severity and a concrete remediation step. Acceptance belongs to your IT lead.
Prompt-override, jailbreak-persona, system-leak, exfiltration, obfuscated-override and policy-probe tests against your deployed assistant, plus gateway config checks (KB-first, labels, gates).
Uptime heartbeats on your public edges; every failure becomes a ledgered incident with an ALCOA+-style trail via the clique.
No offensive capability exists in our tooling — not hidden, not available on request. The absence is the guarantee.
Your IT lead owns acceptance of every finding; we score and recommend, you decide and sign.
Reports state facts and fixes. No countdown timers, no invented threat theater.
| Service | Model | Price |
|---|---|---|
| Edge snapshot (TLS + header posture, one domain) | one-off, 48 h | CHF 0 |
| Baseline audit (22 controls + remediation plan) | per audit | CHF 1,800 |
| AI-security review (battery + config checks) | per assistant | CHF 1,200 |
| Monitoring (heartbeats + incident ledger) | monthly, cancel monthly | CHF 150 |
| Remediation companion (weekly fix reviews) | monthly | CHF 300 |
All prices in CHF, excl. VAT where applicable. Swiss QR-bill, net 14 days. Audit deliverables include one re-check after your fixes — the follow-up pass is in the price.
A named person replies within 1 business day. The snapshot follows within 48 hours of receiving your URL.
One read-only GET on your public URL: TLS, HSTS, CSP, framing protection, nosniff, referrer policy — scored, with the full 22-control audit offered as the next step. Nothing is probed beyond that single request.
No. Offensive testing is outside our doctrine and tooling. We score configuration and posture, test AI assistants with a fixed defensive battery, and hand ranked fixes to your team.
Your IT lead or accountable manager — acceptance is recorded in the report. We never claim authority over your systems.
Yes: the six-probe battery plus gateway config checks (KB-first grounding, provider labels, action gates). Containment failures arrive with hardening recommendations.