Start with a fit check. Don't send secrets.
Tell us one action, which systems it touches, and when you need to decide.
Selected offer: Agent Action Security Review
Fixed fee, agreed in a signed SOW before we start.
We don't test until you give written authority.
What happens next and scope
WitnessOps actively tests one consequential AI-agent action across the complete path: attacker-controlled input, the agent’s selected action, tool or API execution, effective permissions, the actual saved change, and the evidence supporting the result. Within an agreed environment and test boundary, we attempt prohibited outcomes and show which controls resisted, which failed, what changed, and what needs fixing.
- 01What consequential action can the agent or automation take? Do not send source files or secrets.
- 02One consequential agent or automation action. Fixed fee, agreed in a signed SOW before we start.
- 03We don't test until you give written authority. Payment and authority are agreed before work. This form does not start the review.
Do not submit secrets, credentials, private keys, MFA codes, source exports, full logs, screenshots, customer records, or unrelated production data. Name evidence types only; source materials are handled after scope is agreed.
Fixed fee, agreed in a signed SOW before we start. We don't test until you give written authority. This form is not a booking, a payment, or permission to test.
No work or target-facing check starts from this form.
No customer evidence is accepted until scope is agreed.
Active adversarial testing of one consequential action within the agreed environment. Authorization must be enforced before the system changes. No production changes without separate explicit authorization, destructive activity, persistence, remediation implementation, continuous monitoring or safety certification. Retest cases and allowance must be specified in the agreement.
What the review includes
Who can cause the action, and which identity actually executes it.
Where approval stops, and which permissions the action can use.
Which execution evidence is available, missing, or not yet in scope.
Prioritized findings for that one action, with explicit unknowns left in the record.