Commercial portal · Private offers
Request a private offer.
Bundle AI security products, services, Academy training, and evidence work into a single enterprise engagement. Enterprise offers are scoped through a direct statement of work — tell us what you need and we’ll prepare a tailored proposal.
Private offers can be structured for AWS-compatible delivery when relevant, without requiring AWS Marketplace.
How the buying motion works
Get to yes without waiting on every process sequentially
We help product, security, legal, and finance get to yes quickly with a scoped review plan, approval packet, and evidence-ready deliverables. No-cost scoping means confidentiality, access boundaries, and review planning before paid work begins — not free consulting.
Get to Yes Internally → No-Cost Scoping Retainer
- 01
No-Cost Scoping Retainer
Confidentiality, access boundaries, and review planning before paid work begins. No-cost scoping does not mean free consulting.
- 02
NDA + Scoping Authorization
Mutual NDA, data-handling terms, and explicitly authorized testing boundaries so legal can move in parallel.
- 03
Fixed-Fee Launch Review
The scoped 5–10 business day pre-release review. First findings in 5 business days.
- 04
Private Offer / SOW
A tailored statement of work for the review and any follow-on work (e.g. the deeper 2–4 week assessment).
- 05
Legal + Finance Track
Vendor onboarding, procurement packet, invoice terms, and budget category — run alongside scoping, not after.
- 06
Technical Scoping Track
Architecture, access, prompts, RAG, agents, authz, logs, and test boundaries → a draft review plan.
- 07
Internal Approval Packet
Why now, business pressure, risk if delayed, expected deliverables, and the decision needed — ready to forward.
Launch Review Onboarding Kit
Artifacts your champion can forward internally — Get to Yes Internally
The first deliverable is a decision package, not just a report. Each asset is track-aware — copy or forward it.
AI Launch Review One-PagerForwardable summary of the offer, timeline, and positioning.Show copy-ready content ↓
AI LAUNCH REVIEW — ONE-PAGER Ship AI without letting customers, attackers, or enterprise security reviewers discover the weak points first. Track: Get to Yes Internally → No-Cost Scoping Retainer Move legal, finance, procurement, and technical scoping in parallel so the work can start without waiting for every internal process to finish sequentially. Timeline: No-cost scoping packet immediately. Draft review plan after intake. Paid SOW/private offer after scope is clear. We help product, security, legal, and finance get to yes quickly with a scoped review plan, approval packet, and evidence-ready deliverables.
Internal Approval MemoMemo focused on parallel legal/finance/technical approval so work can start without sequential delay.Show copy-ready content ↓
INTERNAL APPROVAL MEMO — No-Cost Scoping Retainer Why now: Need NDA first, need procurement packet, need internal memo, need fixed-fee quote, need vendor onboarding, need a no-cost scoping phase. Business pressure: We may want to move, but vendor onboarding, NDA, finance, SOW, procurement, security review, and internal justification can stall everything. Focus: This engagement is about parallel legal/finance/technical approval so work can start without sequential delay. What we are buying: No-Cost Scoping Retainer. Timeline: No-cost scoping packet immediately. Draft review plan after intake. Paid SOW/private offer after scope is clear. Budget category: Pre-SOW — no committed budget required to start scoping. Note: This is a scoped pre-release review, not a platform migration or open-ended program build. Expected deliverables: • Mutual NDA or pre-signed NDA option • No-Cost Scoping Retainer • Vendor / Procurement Packet • Technical Access Checklist • Internal Approval Memo • Draft Launch Review Plan • Private Offer / SOW Outline Who needs to approve: • Champion • Legal • Finance/Procurement • Security • Engineering/Product Risk if delayed: Customers, attackers, or enterprise security reviewers discover the weak points first. Decision needed: Approve a no-cost scoping phase (NDA + access boundaries + draft plan) so legal, finance, and technical can move in parallel, then a fixed-fee SOW / private offer once scope is clear. Scope guardrails: • Not a rubber stamp. • Not a certification claim. • Not an open-ended governance program. • Not a platform migration. • Not production testing without explicit authorization.
Technical Access ChecklistWhat engineering/security provides for first findings.Show copy-ready content ↓
TECHNICAL ACCESS CHECKLIST — No-Cost Scoping Retainer To produce the draft review plan and first findings (5 business days), please prepare: • Architecture overview / data-flow diagram (or a 30-min walkthrough) • Demo or staging environment access (read-only is fine to start) • Prompts, system instructions, and tool/function definitions • RAG / retrieval sources and tenant-boundary description • Agent tools, permissions, approval paths, and rollback design • AuthN/AuthZ and identity-propagation notes • Logging, audit, and eval coverage (what exists today) • Test boundaries: what we may exercise, and what is off-limits Authorized-testing note: adversarial testing happens only within explicitly authorized boundaries (see NDA + Scoping Authorization).
Legal + Procurement PacketVendor, payment, and buying-motion details for finance.Show copy-ready content ↓
VENDOR / PROCUREMENT PACKET — aisecurity.llc Engagement: No-Cost Scoping Retainer Budget category: Pre-SOW — no committed budget required to start scoping. Vendor profile: aisecurity.llc — AI product security engineering (red team, blue team, evidence). Payment: fixed-fee where possible; invoice terms available; private offer / SOW path. Security/assurance: trust-center materials and references available on request. Onboarding: we can complete standard vendor onboarding and security questionnaires. Buying motion: 1. No-Cost Scoping Retainer (NDA + access boundaries + draft plan) — no committed budget to start. 2. Fixed-Fee Launch Review (5–10 business days). 3. Private Offer / SOW for follow-on work (e.g. deeper 2–4 week AI Product Security Assessment). No-cost scoping does not mean free consulting. It means confidentiality, access boundaries, and review planning before paid work begins.
Draft Launch Review PlanMADE-aligned plan, timeline, and deliverables.Show copy-ready content ↓
DRAFT REVIEW PLAN — No-Cost Scoping Retainer MADE launch translation: • Map what is launching. • Attack what can be abused. • Defend what must hold. • Evidence what is safe enough to ship. Timeline: No-cost scoping packet immediately. Draft review plan after intake. Paid SOW/private offer after scope is clear. Deliverables: • Mutual NDA or pre-signed NDA option • No-Cost Scoping Retainer • Vendor / Procurement Packet • Technical Access Checklist • Internal Approval Memo • Draft Launch Review Plan • Private Offer / SOW Outline The first deliverable is a decision package, not just a report.
Onboarding
Move four tracks in parallel
We put legal, finance, procurement, and technical scoping on parallel rails so the work can start without waiting on every internal process sequentially.
Technical Scoping
Output: Draft Launch Review Plan
- architecture
- demo/staging
- prompts
- RAG
- agents/tools
- authz
- logs/evals
- test boundaries
Legal
Output: NDA + Scoping Authorization
- mutual NDA
- data handling
- authorized testing boundaries
- confidentiality
- work-product terms
Finance / Procurement
Output: Procurement Packet
- vendor profile
- tax/payment details
- budget category
- fixed-fee quote path
- invoice terms
- onboarding answers
Internal Approval
Output: Approval Memo
- why now
- business pressure
- risk if delayed
- expected deliverables
- timeline
- decision needed
Readiness packet
Bundle a scoped pentest or red team engagement
A private offer can include scoped penetration testing, cloud review, or adversarial red teaming. Build the readiness packet first — targets, authorization, ROE, access, evidence handling, and deliverables — so the offer and SOW come together cleanly.
Readiness Packet
Pen Test & Red Team Readiness Packet
Cobalt-style onboarding for scoped security testing, adversarial review, cloud assessment, and AI/agentic red teaming.
- Scope Brief & Target Inventory
- Rules of Engagement & Authorization
- Access Plan & Evidence Handling
- Required contracts + Draft SOW inputs
Testing only proceeds against targets your organization owns, controls, or is explicitly authorized to assess.
From packet to offer
Private offers are generated from readiness packets
A private offer should be generated from a clear packet, not a vague discovery call. Complete the readiness packet for your engagement, then we turn it into a fixed-fee offer.
- 1Choose your buyer pressure
- 2Complete the readiness packet
- 3Confirm NDA / legal path
- 4Generate draft SOW inputs
- 5Request a fixed-fee private offer
- 6Kickoff after approval
Readiness packets
Pick the packet to turn into an offer
Each packet captures scope, authorization, access, evidence, and contracts — everything finance and legal need to approve a fixed-fee engagement.
Launch Review Packet
We are launching an AI feature, copilot, RAG system, agent, or workflow soon and need launch-risk clarity fast.
Product Security Packet
We need a full architecture, data-flow, trust-boundary, model/provider, RAG, and tenant-isolation review beyond an urgent launch gate.
Buyer Evidence Packet
Enterprise buyers are asking AI security questions we cannot answer cleanly, and the deal/security review is slowing down.
Agent Authority Packet
Agents, tools, credentials, workflows, approvals, and actions have unclear blast radius.
Pentest Readiness Packet
We need a pentest or adversarial test, but scope, authorization, ROE, access, window, evidence, and procurement are not ready.
AI Red Team Packet
We need adversarial validation of prompt injection, RAG exposure, tool abuse, tenant leakage, and unsafe autonomy.
RAG Boundary Packet
RAG retrieval, embeddings, ingestion, and tenant boundaries may leak customer or cross-tenant data.
Connector Security Packet
OAuth apps, SaaS connectors, scopes, webhooks, token storage, and connected actions need a least-privilege review.
Enterprise Onboarding Packet
Enterprise SSO/SCIM, RBAC, provisioning, deprovisioning, and auditability are becoming a deal blocker.
Program Build Packet
AI security is scattered policy with no operating model, ownership, controls, evidence, or cadence.
Maturity Scorecard
We do not yet know our AI security gaps or where to invest first.
Secure AI SDLC Packet
AI security is not operationalized in engineering: CI/CD, design review, code review, evals, logging, and release gates.
Guardrails & Evals Packet
Our guardrails, evals, refusal behavior, and release criteria have unknown coverage and failure modes.
Provider Risk Packet
We need clarity on model/provider data flows, retention, training terms, residency, logging, and fallback risk.
Claim-Readiness Packet
We need to control what we can safely say publicly or to buyers after assessment work.
Custom Support Packet
We have a specialized AI security need that does not fit a standard service.
What you can bundle
One scoped engagement, many components
Products + onboarding
SecEng tools and platforms with implementation and onboarding included.
Services + retests
Assessments, red teaming, and hardening with scheduled retests.
Academy at scale
Team training, SCORM/LMS packages, and certification seats.
Evidence + reporting
Evidence packs, control mappings, and executive reporting cadence.
Enterprise packages
Common starting points
SecEng Workbench
AI security program, trust evidence, and remediation workbench
SecEng Trust Scanner
AI and security claim scanner for customer-facing trust language
SecEng Adversarial Range
Deployable AI security lab for RAG, agents, telemetry, and evidence validation
SecEng Evidence Analytics
Evidence debt, high-risk claim, and AI security analytics for SIEM and BI platforms
SecEng AI Security Program Jumpstart
Expert-led AI security program launch via direct SOW
SecEng Enterprise AI Security Buildout
Full-scope enterprise AI security program design, implementation, and enablement
AIPSA SCORM Training Package
LMS-compatible AI product security training — 16 hands-on labs, SCORM 2004, xAPI, and LTI 1.3
Request a private offer
Tell us what to scope
This routes directly to our scoping queue. Do not paste secrets or customer data — just enough context to prepare a tailored private offer.
Private-offer packet
The default enterprise packet is ready to assemble.
This packet is designed for quote-first and invoice-first motion with legal, procurement, data handling, and evidence language attached to the same opportunity.
Statement of Work Template
Mission-specific scope, deliverables, timeline, access, assumptions, and acceptance criteria for scoped AI security engagements.
Mutual NDA
Mutual confidentiality protections for pre-sales, delivery, and research collaboration contexts.
Used for NDA baseline
Assessment Terms Addendum
Scope, authorization, evidence use, testing boundaries, safe harbor, retesting, reporting limitations, and reliance limits for AI product security assessments.
Used for Assessment and quote-first services
Data Processing Addendum
Controller/processor allocation, data protection obligations, subprocessing, security measures, AI provider boundaries, and customer-data handling for scoped services.
Used for Data handling and public-safe claims
Commercial Services Addendum
Converts the services framework into scoped paid work with rate card, invoicing, and activation terms.
Used for Retainer and advisory billing
Publication & Claim-Readiness Policy
Claim-readiness criteria for public research, trust pages, scorecards, attestations, sponsor materials, security review outputs, and buyer-facing evidence.
Used for Data handling and public-safe claims · Sponsored research and launch
Payment terms
Net 30, prepaid invoice, or custom procurement terms.
Acceptance terms
Accepted when the agreed deliverables are delivered and the buyer has had a factual review window.
Fulfillment workflow
scope -> packet -> quote / invoice -> acceptance -> launch room
Prefer to browse first? Back to the Marketplace