Know What Your Agents Can Access. Then Prove What They Can Do.
AI does the discovery. A human does the judgment and the testing.
Two engagements: the AI Agent & MCP Inventory and AI Penetration Testing. Automated discovery, human-led testing and review. Each has a defined scope, a fixed price or a scope set on a call, and a leadership-ready deliverable.
SONAR handles automated discovery in AWS, and JARVIS answers questions on this site. Neither runs tests or decides findings: all testing and the review of every finding are done by the founder.
JARVIS
Knowledge Engine
Built to answer questions in real time about CAIS engagements, methodology, and scoping, including the chat widget on this page. The founder's time stays on investigation, not Q&A.
SONAR
Cloud Cartographer
Read-only AWS discovery. One AWS account. AI services are checked across all enabled regions. Using a read-only role you grant, it lists the AI agents and AI services (Bedrock, AgentCore, SageMaker, Q Business), the IAM roles and permissions they use, and the infrastructure around them. AWS only. The founder reviews every result before it reaches a report.
AI Agent & MCP Inventory Start Here
A one-week, fixed-fee inventory of the AI agents running in your AWS environment, the MCP servers they connect to, the tools they can call, and the credentials and permissions they hold. Human-led, read-only, and delivered as a report your security leader can take to the board. $9,500.
See the Inventory →AI Penetration Testing Flagship
Manual, human-led testing of what your AI agents do under attack. We map each agent's tools, data, and credentials, model the threats, then test by hand: instructions planted in content the agent reads, attempts to misuse its tools, data leaking out through tool calls, and permissions pushed to their limits. Every finding reproduced with transcripts and tool-call evidence. Fixed fee, set after a scoping call.
See the Full Engagement →Ready to get started?
Tell us about your security challenges. We'll recommend the right engagement for your organization.
Book a Consultation Request a Consultation