Choose your assessment package

Uses Retrieval-Augmented Generation (RAG)

Product retrieves documents, embeddings, or knowledge from a vector store or search index.

Uses AI Agents or Tool Use

LLM or AI system can call tools, execute code, browse the web, or take actions autonomously.

Uses External APIs / Integrations

AI system calls third-party APIs, writes to external systems, or integrates with SaaS products.

Regulated Data (HIPAA, PCI, etc.)

System handles data subject to HIPAA, PCI-DSS, SOC 2, GDPR, or similar compliance regimes.

Has a Dedicated Security Team

Organization has at least one person in a security role (AppSec, PSIRT, SecEng, CISO, etc.).

Has Formal AI Governance

Organization has a written AI policy, AI risk committee, or formal AI governance process.