Relevant when…
Your shortlist needs a firm focused on the permission and data boundaries of deployed agents.
This is editorial fit guidance based on public positioning. We have not independently tested this provider or confirmed availability.
What the provider documents
- Assessment scope
- AI agent testing · Prompt injection · RAG security · Tool misuse
- Engagement model
- Assessment service
- Deliverables
- The site describes verification of chained impact; a sample deliverable is linked.
- Deployment
- Not published
- Pricing
- Not published
- Retesting
- Confirm with provider
Source for documented facts: the provider’s official offering ↗. “Not published” means not recorded in the reviewed source, not that an option is unavailable.
Before you request a proposal
- What will the written report contain?
- How are tenant isolation and sandbox tests authorized?
- Is a remediation retest included?
Ask the provider to put authorized systems, exclusions, evidence handling, timing and acceptance criteria in the written scope. Do not send credentials or vulnerability evidence through an initial inquiry.
Sources & verification
- Aspherity — official service information ↗
Supports the summary, service model, scope and recorded engagement facts above. Evidence status: provider-stated.