Evidence-bound security research

Authorizationbefore automation.

AI-assisted security research with human authorization, verifiable evidence and disciplined scope control.

RESEARCH CONTROL / 01POLICY ACTIVE
HUMANAUTHROOT OF TRUST
SCOPEMODELEVIDENCEAPPROVAL
ScopeExplicit
ClaimsEvidence-bound
SubmissionHuman-only
AUTHORIZED TARGETS ONLYHUMAN REVIEWSOURCE-GROUNDEDREPRODUCIBLE EVIDENCECOST-CONTROLLED

Security services

Research that survives scrutiny.

We combine AI-scale analysis with deterministic controls and independent human judgment. Speed helps. Evidence decides.

01

Authorized web application research

Purpose-bound investigation inside a written target boundary, with controlled browser activity and evidence capture.

View service
02

Open-source security review

Source analysis tied to explicit repositories, reproducible hypotheses and independent verification before any claim.

View service
03

AI system security review

Agent, tool, MCP and retrieval boundaries examined for prompt injection, authority drift and unsafe action paths.

View service
04

Vulnerability verification

A disciplined pass from observation to supported impact, with rejected hypotheses preserved instead of promoted.

View service

The operating discipline

Models propose. Controls decide.

Authority is never delegated to a prompt. Every material action crosses a code-enforced scope, approval and evidence boundary.

  1. 01

    Authorize

    Written objective, owner and exact scope before any research action.

  2. 02

    Constrain

    Deterministic controls hold domains, tools, rate, cost and approvals.

  3. 03

    Verify

    Evidence is hashed, source-linked and reviewed independently.

  4. 04

    Report

    Clear claims, reproducible steps and remediation—never automatic submission.

Evidence over assertion

A finding is a claim with a chain of custody.

Viridis reports distinguish observations, hypotheses, candidate findings, verified findings and rejected findings. Each artifact is source-linked and integrity checked.

Read the verification standard
EVIDENCE RECEIPTSHA-256 / LOCKED
ClassificationCandidate observation
AuthorizationScope match verified
Independent reviewRequired
8f2d0c71…c9a3b7e1

Start with the boundary

Bring us the system, the authorization and the question.

We will tell you what can be tested, what evidence can be produced and where human judgment remains essential.

Start a scoped conversation