Question 1

How does an engagement start?

Accepted Answer

With a 30-minute discovery call. We agree on one workflow or system to look at first, then send a fixed scope and timeline.

Question 2

Do you only advise, or also build and test?

Accepted Answer

All three. We design and build AI solutions, integrate them with your systems and test them the way an attacker would, so security is part of the work from day one.

Question 3

Do you also handle information security that isn't about AI?

Accepted Answer

Yes. AI is our focus, but information security is where we come from: risk assessments and hardening, penetration testing of AI and classic systems alike, compliance programs such as ISO 27001 and SOC 2, cloud security and data protection.

Question 4

Can the team that builds our AI also test it?

Accepted Answer

For assurance and penetration tests we assign testers who were not involved in building the system, so the results are independent.

Question 5

Do you run physical penetration tests and social engineering?

Accepted Answer

Yes. Alongside AI, web, network and cloud testing, we run physical intrusion tests and phishing campaigns, always with written authorization and agreed rules of engagement.

Question 6

Which frameworks do you work with?

Accepted Answer

We map findings and controls to the OWASP Top 10 for LLM Applications, MITRE ATLAS, NIST AI RMF and ISO/IEC 42001, and to the rules that apply to you, such as Israel's Amendment 13 and the EU AI Act.

Question 7

Do you work with companies outside Israel?

Accepted Answer

Yes. We work in Hebrew and English, with Israeli enterprises and with international companies.

Accessibility statement

Our commitment

What we did

Known limitations

Contact for accessibility