You shipped an agent. We find what it can be talked into: what the feature can reach, what it can be persuaded to do, and where the weights came from. No grading your model — testing your product.
OWASP LLM Top 10 · MITRE ATLAS · no AI writes your report.
Book a scoping callSigned authorization first · public standards (PTES, OWASP, NIST, ATT&CK) · report reviewed by a second engineer · retest within 30 days included · your data destroyed in 30 days · late report = 10% off, in the contract.