Our main entry engagement

Agent Governance Readiness Assessment.

A fixed-scope, read-only engagement designed to give you a clear starting point: which agents you run, who owns them, what they can reach, and whether your controls hold. Metadata only, never secret values.

How it’s designed

Small, fixed and read-only.

We’re designing it as a small, consent-based engagement, scoped with you in writing. We’re shaping it now with practitioners.

Scope: Agreed with you in writing before anything runs.
Access: Designed to be read-only, changing nothing in your environment.
Data: Designed to use metadata only. Never secret values, never the content of your data.
Control: Designed so your team stays in control of what runs and what leaves your environment.

What you get

What the assessment is designed to give you.

An agent inventory with owners

The agents you run, including ones nobody approved, each with a named owner.

Reach and exposure

What each agent can reach across your tools, systems and data (its Agent(ic) Perimeter), and where its access goes beyond what it needs.

Policy versus practice

Where your AI policy and the controls that should enforce it don’t yet match, in a short list you can act on.

Findings with owners, and a board summary

Each finding with an owner and a next step, plus a plain summary for your board and evidence your auditors can follow.

We never call an agent “safe”. We show what we found and the evidence behind it.

What it isn’t

Clear about the edges.

Independent: we don’t build, run or implement your agents.
Not EDR, and not a runtime blocker. It isn’t designed to block anything.
Not a secrets scanner. It’s designed never to read secret values.
Not a certification, an attestation or a compliance score.

It’s designed as an independent check on what your existing platforms report, and a starting point for governing agents through their lifecycle.

Help shape the first engagements.

We’re talking with CISOs, CROs, CIOs, compliance and internal audit leaders about what evidence their boards and auditors need.

Compare notes