Red-Team Sprint
A one- to two-week adversarial campaign within agreed limits, mapped to the OWASP Top 10 for LLM Applications (2025).
The problem
Fixed test packs miss the attacks a motivated person improvises.
What we do
- Governed exploratory testing on top of fixed packs
- Injection, leakage, unsafe links and jailbreak variants
- Optional tool-abuse, configuration and supply-chain checks with inside access
What you receive
- Findings mapped to OWASP LLM Top 10 (2025)
- Discovered failures converted into regression tests
What you provide
- Written authorization and limits
- Test environment for inside modules
Limits
- Within authorized scope only; no load testing of production
Results describe behavior within the tested scope and configuration. They give you independent evidence for security reviews, audits and compliance work; certification itself is issued by accredited bodies.
Availability and independence
Pilot: Procedure designed and deliverable with existing tools, but not yet delivered to a client. Sold under pilot terms. Procedure designed and deliverable with existing tools, but not yet delivered to a client. Sold under pilot terms.
Pilot deliveries are scoped in writing, tell you it is an early delivery, and follow the same review and evidence rules as any engagement.
Independent evaluation: we had no hand in building or advising on your agent, and our price is fixed before testing starts, so the results don't change what we're paid.
Modules
Optional, quoted separately
- Tool abuse and limitsNeeds a test environment or system accessPilot: Procedure designed and deliverable with existing tools, but not yet delivered to a client. Sold under pilot terms.
- Configuration, supply chain and tenant isolationNeeds a test environment or system accessPilot: Procedure designed and deliverable with existing tools, but not yet delivered to a client. Sold under pilot terms.
- Multi-turn pressureWorks through public chatPilot: Procedure designed and deliverable with existing tools, but not yet delivered to a client. Sold under pilot terms.
Future modules, not quoted yet
- Multi-agent and image-borne attacksRoadmap: Not deliverable yet. Never quoted or included in a statement of work.
What is covered
The test areas this service always includes, with their status at the access level it uses.
- Direct prompt injectionCan one message hijack it?Available now: Built into the TrendLab evaluation engine and used in sealed runs.
- Indirect injectionCan content it reads hijack it?Available now: Built into the TrendLab evaluation engine and used in sealed runs.
- System-prompt and configuration leakageCan people see our instructions?Available now: Built into the TrendLab evaluation engine and used in sealed runs.
- Unsafe links, markdown-image exfiltrationCan it leak data through links?Available now: Built into the TrendLab evaluation engine and used in sealed runs.
- Jailbreaks and harmful outputCan it be made to say awful things?Available now: Built into the TrendLab evaluation engine and used in sealed runs.