Pricing
Every scope is fixed, and its deliverables are published below. Prices are on request while we launch: tell us the scope and the system, and we quote a fixed price for that scope.
How a quote works
You name the scope
Send the scope code, or describe the problem and we suggest one. A few lines on the system help: the models, agents, tools and hosting.
We agree the boundary
What is in and out of scope, the questions that matter, and the rules of engagement for any testing, in writing.
We quote a fixed price
One price for that scope and boundary. If the boundary changes, the quote changes before the work does.
We sign an engagement letter
It fixes the scope, the people involved, where evidence is kept (EU servers only) and what happens to it at the end.
In every engagement
- The TriOngle Method v1.0, with every finding mapped to the frameworks and the law it touches.
- One plain-language report, and a walkthrough with your team.
- Test evidence kept on EU servers only.
- Scopes can be combined in one engagement and one report, for example S1 AI red teaming and adversarial testing with G1 EU AI Act, ISO/IEC 42001 and GDPR readiness, one report.
Core scopes
- Architect
A1 AI architecture review
Deliverables
- Trust-boundary diagram of the system as built
- Findings, each mapped under the TriOngle Method
- Target architecture, with the order in which to make the changes
Price on request
Ask for the A1 price - Architect
A2 Threat modelling for LLM and agent systems
Deliverables
- Threat model: assets, data flows, trust boundaries and actors
- Abuse cases written as concrete attack stories
- Control priorities, ranked by the risk each one removes
Price on request
Ask for the A2 price - Architect
A3 Secure retrieval (RAG) design
Deliverables
- Permission-aware retrieval design
- Poisoning tests against the index and its ingestion path
- Tenant isolation review
Price on request
Ask for the A3 price Deliverables
- Report with every finding mapped under the TriOngle Method
- Proofs of concept you can rerun
- Retest letter for the fixed findings
- Regression suite for your CI
Price on request
Ask for the S1 price- Assure
S2 Agent and MCP assurance
Deliverables
- Tool permission matrix
- OAuth and scope review
- Sandboxing review
- MCP server audit
Price on request
Ask for the S2 price - Assure
S3 Guardrails and evaluation
Deliverables
- Guardrail choice and tuning, vendor-neutral
- Evaluation suite that runs in your CI
- Error rates, each with its method and date
Price on request
Ask for the S3 price - Assure
S4 AI supply chain
Deliverables
- AI/ML bill of materials (models, datasets, adapters, packages, MCP servers)
- Signing and provenance plan
- Model file scans
Price on request
Ask for the S4 price Deliverables
- AI Act risk classification of each system
- Gap analysis against the AI Act, ISO/IEC 42001 and GDPR
- Technical documentation outline
- Article 50 transparency checks
- Data protection impact assessment (DPIA)
Price on request
Ask for the G1 price- Govern
G2 AI incident response
Deliverables
- Incident playbooks for AI-specific incidents
- Logging specification
- Tabletop exercise with your team
Price on request
Ask for the G2 price Deliverables
- Cryptography inventory as a CBOM
- Migration plan with priorities and dates
Price on request
Ask for the G3 price
AI agent scopes
- Assure
AG1 MCP server and tool-chain audit
Deliverables
- Inventory of MCP servers and tools, local and remote
- Authorization review: token audience, passthrough, client registration and scopes
- SSRF and installation tests
- Tool-poisoning tests
Price on request
Ask for the AG1 price - Architect
AG2 Agent identity and delegation design
Deliverables
- Principal model: on-behalf-of or autonomous, per agent
- Token flows
- Scope catalogue
- Sponsor and lifecycle rules
- Conditional access policy
Price on request
Ask for the AG2 price - Assure
AG3 Coding-agent and CI hardening
Deliverables
- Secure baselines for the coding agents and harnesses in use
- Hook and approval policy
- Sandbox-escape tests
- Pull-request and issue injection tests
Price on request
Ask for the AG3 price - Architect
AG4 Injection-resistant architecture review
Deliverables
- Data-flow map of each agent workflow
- Rule of Two score per workflow
- Redesign using capability separation or plan-then-execute
- Risk register
Price on request
Ask for the AG4 price - Assure
AG5 Memory and context integrity assessment
Deliverables
- Map of memory writes and reads
- Provenance tagging design
- Memory-poisoning tests
- Purge policy
Price on request
Ask for the AG5 price - Architect
AG6 A2A and multi-agent trust review
Deliverables
- Peer authentication review
- Session-smuggling tests
- Cascade analysis
- Kill switches and their test
Price on request
Ask for the AG6 price - Assure
AG7 Agent evaluation suite
Deliverables
- Attack scenarios mapped to MITRE ATLAS
- Regression harness for your CI
- Scorecard per model and configuration
Price on request
Ask for the AG7 price - Govern
AG8 Runtime monitoring design
Deliverables
- Telemetry schema for agent activity
- Detections: scope jumps, egress, memory writes, new tools
- SIEM content: rules, dashboards and triage notes
Price on request
Ask for the AG8 price - Architect
AG9 Managed agent runtime review
Deliverables
- Configuration review of the runtime in use
- Findings mapped under the TriOngle Method
- Hardened baseline configuration
Price on request
Ask for the AG9 price - Govern
AG10 Agent supply-chain governance
Deliverables
- Allow-list for MCP servers, skills and plugins
- Provenance checks
- Review and approval workflow
- Version pinning and patching policy
Price on request
Ask for the AG10 price - Govern
AG11 Model migration and routing review
Deliverables
- Evaluation parity results, old model against new
- Data residency and retention matrix per provider
- Licence and attribution check
- Failover plan
Price on request
Ask for the AG11 price - Govern
AG12 Agent incident response
Deliverables
- Playbooks: injection, token theft, memory poisoning, rogue agent
- Trace forensics procedure
- Tabletop exercise
Price on request
Ask for the AG12 price