€2,500 · Fixed-scope paid diagnostic

Find where untrusted content can steer your agent.

I map up to three ingestion paths, test documented indirect-injection scenarios against an agreed test workflow, and return reproducible evidence plus a prioritized control plan.

Check fit — no payment yet Inspect the sample output

Honest boundary: this is not certification, a full penetration test, or a promise that every injection path will be found. Tripwire is one signal layer; the review also covers least privilege, approval gates, isolation, and action-sink enforcement.

What the review includes.

  • Map up to three agreed untrusted-content ingestion paths and their connected action sinks.
  • Run non-destructive, documented scenarios against the agreed test environment or supplied sanitized artifacts.
  • Record observed behavior, exact reproduction steps, controls already present, and material limitations.
  • Deliver one prioritized findings report, one control-plan readout, and one written clarification round.

View a clearly labelled synthetic sample deliverable before requesting the review.

Good fit — and not a fit.

Good fit

  • Your agent reads email, tickets, documents, web pages, RAG content, or tool results.
  • It can send, refund, cancel, update, write, or call another consequential tool.
  • You can supply an authorized test workflow, sanitized artifacts, and a technical owner.

Not a fit

  • You need certification, legal advice, exploit development, or a complete production penetration test.
  • You cannot authorize the environment or safely isolate test actions.
  • You need a guaranteed finding, guaranteed fix, or a claim that the system is “safe.”

What happens next.

  1. Fit check. You send the product URL and one input-to-action path. No secrets or customer data.
  2. Written scope. We confirm paths, access, owner, exclusions, start date, delivery date, fee, and payment schedule.
  3. Authorized review. Testing starts only after access and inputs are sufficient.
  4. Evidence handoff. You receive the report, prioritized controls, readout, and one clarification round.