I assess how AI applications and agents could expose sensitive information, be manipulated or take unauthorised actions, and help your team strengthen the controls around them.
Identify where your AI systems are exposed, which controls need strengthening and how to verify the changes. Each assessment is scoped to your applications, data and business risks.
Assess whether malicious instructions in conversations, documents, websites or tool responses can redirect your AI system. Test safeguards and identify changes that reduce opportunities for data theft, manipulated outputs and unauthorised actions.
Examine the permissions, credentials and integrations that allow AI agents to act. Review tool access, including Model Context Protocol (MCP) connections, and identify excessive privileges, unsafe execution paths and opportunities to bypass human approval.
Assess retrieval-augmented generation (RAG) systems that connect AI to your organisation's information. Examine document permissions, customer data separation and retrieval controls to identify whether users could obtain information they are not authorised to access.
Review how proposed AI actions are checked before execution. Assess permission enforcement, approval gates and activity limits, together with the logs needed to investigate suspicious behaviour and reconstruct what happened.
Tell me which AI applications or agents you use, what information they can access and what actions they can take. We can define a focused assessment around your security concerns.