Relevant when…
Your buying question centers on an MCP deployment rather than a standalone model evaluation.
This is editorial fit guidance based on public positioning. We have not independently tested this provider or confirmed availability.
What the provider documents
- Assessment scope
- MCP assessment · Tool misuse
- Engagement model
- Assessment service
- Deliverables
- Technical analysis and actionable findings from adversarial testing of interfaces, tools and authorization boundaries.
- Deployment
- Not published
- Pricing
- Not published
- Retesting
- Confirm with provider
Source for documented facts: the provider’s official offering ↗. “Not published” means not recorded in the reviewed source, not that an option is unavailable.
Before you request a proposal
- Which MCP servers, clients and enterprise integrations are included?
- How are authorization, tool poisoning and privilege escalation exercised?
- Which evidence, remediation support and retest terms will the proposal specify?
Ask the provider to put authorized systems, exclusions, evidence handling, timing and acceptance criteria in the written scope. Do not send credentials or vulnerability evidence through an initial inquiry.
Sources & verification
- Optiv — official service information ↗
Supports the summary, service model, scope and recorded engagement facts above. Evidence status: provider-stated.