Three weeks attacking AI systems — your own first. Prompt injection direct and indirect, tool abuse, scope escalation, data exfiltration, and the defences that actually hold.
The premise is that any content your system reads — web pages, documents, email, retrieved chunks — is untrusted input. Everything else follows from taking that seriously. You will break your own system in week one, which is considerably cheaper than learning the same lesson from a customer.
You attack your own systems and our lab environments only. We are explicit about scope.
No. You need to have built something with tool access.
It will make its weaknesses visible and several of them fixable. Nobody can promise more than that.
No payment at this stage. We confirm dates, fees and fit before you commit to anything.