What's Included
Architecture review of the existing system
Code quality assessment
A system-specific security exposure check
A written findings report with a prioritized path forward
A clear recommendation: remediate in place, rebuild, or move to a fully custom engagement
What's Not Included
Remediation itself: scoped separately based on findings
Formal penetration testing
Enterprise-scale technical due diligence: handled through the Blueprint stage of Katalyst Custom™ instead
How this differs from our other audits: the AI Security Audit covers AI-specific exposure across the organization (credentials, permissions, unsanctioned usage). This audit is a deep-dive on one existing system's architecture and code specifically.
Timeline: varies by system complexity, confirmed in scoping.
Price: fixed for the defined scope, set during scoping.
Pattern We See
The riskiest system isn't the one nobody trusts; it's the one that's been working fine for months. A tool built quickly, under real deadline pressure, to solve one specific problem well, rarely gets a second look at its access model once it's shipped and stable. The failures this audit is built to catch are almost never in the code that looks unfinished; they're in the code that looks done.
FAQ
Yes. That's one of the most common reasons this audit exists. We review the architecture, code quality, and security exposure of what you actually have, and you get an independent picture that doesn't depend on the people who built it.
Working fine is what the riskiest systems have in common. A tool built quickly under deadline pressure rarely gets a second look at its access model once it ships. The failures this audit catches are almost never in code that looks unfinished. They are in code that looks done.
You get a written findings report with a prioritized path forward and a clear recommendation: remediate in place, rebuild, or move to a fully custom engagement. What you do with it is your call, and none of those paths is presumed in advance.
They're two different services. The AI Security Audit detects organization-level AI security exposure: exposed AI credentials, AI tool and agent permissions, and unsanctioned AI usage. The Code & Platform Audit reviews one existing AI tool, agent, or system in detail: architecture, code quality, and system-specific security risk.
