Your AIcan act. Who gets hurt?
A bespoke tabletop exercise for the AI you run. We find the weak spots, with care.
Built around your environment•Played by your team•Half or full day
Security teams come in colors.
- Finds the break.
- Holds the line.
- Gets them talking.
- Asks who gets hurt.
Most tests ask how it breaks. Pink also asks who it hurts.
Red, blue and purple are established practice. Pink is new, and we say so on purpose.
Three seats at the table.
It is a tabletop exercise. Your own people take the seats and play a scenario out, move by move, on a system you actually run.
- Plays the attack.
- Runs the system and lives with it.
- Speaks for whoever is on the other end.
Most exercises fill two seats. The third one is pink.
Built around your world.
Nothing here comes off a shelf. We learn how your system works, then write the exercise around a situation that could really happen to you.
- We learnYour system, your people, what it can touch.
- We writeA scenario that makes sense for you.
- We buildThe cards your table will play it with.
Every table plays a different game. Yours is made for you.
Rank by harm.
Every weak spot the table finds goes on the board. Slide one toward the people it reaches and watch the order change.
Illustrative examples. Your session writes its own.
One session. Four moves.
- Your system and everything it can touch.
- The scenario, live, with your people in the seats.
- Every weak spot, ordered by who gets hurt.
- A threat model your team built itself.
Runs as a half day or a full day.
What you leave with.
- A threat modelOf the system you actually run.
- A ranked listWeak spots, ordered by who gets hurt.
- A shared pictureEveryone saw the same thing happen.
- The practiceYour team has now done this once.
The value is in the playing. Your team does the threat modeling.
What it costs.
One price per session, your whole team in the room. Each one is designed for your environment.
- Half-day workshop$6,000
- Full-day workshop$12,000
- Larger teams and repeat sessions
This is adversarial testing of how your AI behaves, and practice for the people around it. It is not a compliance audit, an infrastructure pentest or a guarantee.
Weak spots, with care.
Finding what could go wrong is the job. How it is done matters just as much.
- No gotchasNobody is being tested. The system is.
- No blameA weak spot is a finding, not a fault.
- Your paceThe table decides how far to push.
The point is to see clearly. Then to look after the people on the other end.
Tell us what you run.
A few lines is enough. We will come back with a scenario shaped around your environment.
Got it. Thank you.
We will be in touch about a scenario for your team.