Services
AI security on two tracks: the AI your staff use, and the AI you build.
Find and control company data exposure through staff AI tools. Test the AI systems you build the way an attacker would. Keep both watched as they change.
Where to start
Find your starting point.
Four common situations, and the service that fits each.
The Shadow AI Review is $2,500: an inventory, a data map, vendor terms, and prioritized fixes.
AI Policy & Controls is $4,500: a one-page policy, approved tools, configured settings, and a staff briefing.
The AI Red-Team Assessment starts from $7,500: an adversarial test under signed rules, a report, and a retest.
AI Security Monitoring: monthly checks of new tools and settings, and quarterly retests of the AI you build.
The services
Two tracks, and monitoring for both.
Each service has its own scope and price.
- 01 · Staff AI useThe AI tools your people use, and the data that goes with them.CENSUSShadow AI ReviewFind out which AI tools your staff use, and what company data goes with them.Latin for “a count, a register,” the root of “census.”$2,500
- 01 · Staff AI useThe AI tools your people use, and the data that goes with them.LEXAI Policy & ControlsA written AI use policy your staff can follow, and the settings that enforce it.Latin for “law,” the root of “legal.”$4,500
- 02 · AI you buildThe AI in your products and internal systems, tested like an attacker would.TENTAMENAI Red-Team AssessmentYour AI system tested the way an attacker would, then retested after you fix it.Latin for “a trial, an attempt,” the root of “tentative.”From $7,500
- 03 · OngoingMonitoring and retesting as tools, models, and threats change.VIGILIAAI Security MonitoringA monthly check on new AI tools, new exposure, and your AI systems, as both keep changing.Latin for “a night watch,” the root of “vigil.”Monthly, quoted
Compare
Which service fits the risk?
The track, what you receive, where it starts, and the price.
| Service | Track | You receive | Start from | Price |
|---|---|---|---|---|
| Shadow AI Review (Census) | Staff AI use | Tool inventory, data map, vendor terms, rated findings, readout | No prerequisite | $2,500 |
| AI Policy & Controls (Lex) | Staff AI use | One-page policy, approved tools, configured controls, staff briefing | A shadow AI review, or a short discovery | $4,500 |
| AI Red-Team Assessment (Tentamen) | AI you build | Rules of engagement, adversarial test, findings report, retest | A scoping call | From $7,500 |
| AI Security Monitoring (Vigilia) | Both | Monthly checks, quarterly retests, monthly report | A review or assessment as baseline | Monthly, quoted |
Every service
What every engagement includes.
The scope differs. These are always part of it.
- Scope, sources, and contacts agreed in writing before work begins
- For any testing, signed authorization and rules of engagement
- Every finding with evidence, a rating, and a specific fix
- A second engineer reviewing every finding before it reaches you
All published amounts are in US dollars. Each engagement is confirmed by a written engagement letter. Testing of any system happens only under a signed authorization and rules of engagement.
Not sure where to start?
Ask a security engineer. It’s free.
Twenty minutes on the AI your staff use or the AI you build. You leave knowing where the risk is likely to be and the right first step.
- 01Check, freeFreeTake the five-minute shadow AI check, or ask a security engineer about your tools or system.
- 02Find the exposure$2,500Every AI tool your staff use, the data reaching it, vendor terms, and prioritized fixes.
- 03Control it, or test what you build$4,500 / from $7,500A policy with enforced settings for staff AI use, or a red-team assessment of the AI you build.
- 04Keep watchMonthlyMonthly checks of new tools and settings, and quarterly retests of the AI you build.
Each step stands on its own. You never commit to the next one in advance.
Questions
Which track should we start on?
If your staff use AI tools, and most do, start with the shadow AI review. If you ship AI to customers, the red-team assessment matters too. A free call settles it.
Do you need access to our systems?
Reviews use read-only access you choose to share. Red-team tests use a test environment and accounts you provide, under signed rules.
Will you certify that we are secure?
No. We report what was tested, how, and what was found. No honest assessment can show that nothing is left to find.
Is this compliance work?
It is technical security work. Findings can support a compliance program, but we do not issue certifications or legal opinions.
How does Custos relate to Sophrono?
Custos is the AI security line of Sophrono, the AI implementation firm. Its engineers build AI systems for clients.