AI application security
Assessment scope can cover prompt injection, retrieval boundaries, data exposure, model routes and API permissions. No universal automated detection is claimed.
AI security & governance / Preview
Know your AI risk. Name the owner. Set the boundary.
Bring AI applications and agents into the same security conversation as infrastructure. Define permitted use, approved data and tools, evaluation requirements and accountable human oversight.
AI at Scale. Humans in Control.
Assess. Govern. Review.
Offline assessment and evidence-review paths are in preview. Customer environments need independent qualification.
Assessment scope can cover prompt injection, retrieval boundaries, data exposure, model routes and API permissions. No universal automated detection is claimed.
Identify tool access, targets, owners and approval boundaries. Test where enforcement happens and what remains outside coverage.
Explore AgentGuard →Planned: AI inventory, use-case risk, vendor review, evaluation evidence, policy ownership and periodic review.
Infrastructure checks still matter. Start with a scoped network review while defining your AI assessment.
Framework references support readiness conversations. They are not certifications or guarantees of compliance.
Capability transparency
Reviewed October 14, 2026. Local tests and fixtures are not real-environment certification.
| Capability | Status | What this means today |
|---|---|---|
| AI and MCP inventory review | Offline preview | Supplied inventory and passive evidence can be reviewed locally. A catalog match is not proof of live coverage or exploitability. |
| Policy and protection assurance | Offline preview | Selected policy, mitigation and verified-protection fixture paths are tested. Missing or stale evidence is not a passing assessment or certification. |
Agree on the mission, data access, owner and acceptance tests before connecting systems.