Offer a fixed-scope assessment that inventories an agent's tools, credentials, data access, network reach, and approval rules, then tests realistic prompt-injection, impersonation, data-exfiltration, and unauthorized-action scenarios. Deliver a prioritized remediation plan and implement practical controls such as sandboxing, least-privilege credentials, transaction limits, human approval gates, logging, and emergency revocation. Begin as an expert-led service and productize repeatable test protocols and evidence collection over time.

Commercial and open-weight AI models are lowering the skill and time required for attacks while organizations are granting agents permission to act on sensitive systems. The signals also indicate that new models can be jailbroken quickly, making predeployment and recurring control testing more urgent than reliance on provider guardrails.