AI Security & Governance Stack
AI Security & Governance Stack brings together AI Security Audit, AI Prompt Injection Defense, AI Usage Policy System and AI Model Inventory for teams putting AI into production, delivered as one project with one intake.
Discount rounded to the nearest $100. Savings are calculated from current component prices, not claimed.
What is included
Each product below is also sold on its own; this bundle delivers all of them as one project at the discounted price on the right.
Problems this solves
AI features went live before anyone checked them for security risks
The AI Security Audit reviews your AI systems and records findings in writing. The defenses, policy and register in the bundle all refer back to those findings.
Chatbots and agents can be tricked by malicious instructions
AI Prompt Injection Defense adds protections against instructions hidden in user input or documents. The defenses are agreed in writing first and tied to the risks the audit found.
Staff have no clear rules on what AI use is allowed
The AI Usage Policy System gives your organization a written AI usage policy. Staff and managers can see what is allowed, and the policy links to the systems it covers.
There is no list of models in use or who approved them
AI Model Inventory keeps a register of the models and AI systems you run. Each entry can show its owner and approval, so audits and reviews have a starting point.
How the 4 work together
These run as one system: each product keeps doing its own job, and this bundle delivers them together as a single project with a single intake.
Shown in the order components are delivered. Detailed cross-product sequencing copy is added in a later phase.
One intake for all 4
Send everything on your checklist, including access, within 72 hours of ordering so your build starts on time.
Not included
What you receive at handover
- AI Security Audit, AI Prompt Injection Defense, AI Usage Policy System and AI Model Inventory, each configured and deployed
- Written security audit findings, prompt injection defenses, an AI usage policy and a model register that refer to each other
- Cross-product workflow configuration with up to three handoffs between the products
- A combined test report covering each product's tests plus 20 cross-product scenarios
- A combined admin guide and a written handover report
- 30 days of post-launch support
Expected benefits and how to measure them
- Can give security and leadership a clear view of AI risk.
- Helps staff use AI within agreed rules.
- Makes AI audits easier to prepare for.
- Open audit findings
- Count findings from the security audit at handover, then track how many are closed each month by your team.
- Blocked injection attempts
- Review the defense logs monthly for attempts detected and blocked, and compare against the test report's scenarios.
- Register coverage
- Compare models listed in the inventory with those found in billing and cloud accounts each quarter.
Before you start: List the AI systems and models you know are running, with owners where known. Note whether any AI policy or security review exists today.
These are things to track, not promised results. Outcomes depend on your data, your team and your market.
Questions about this product
Is the AI Security & Governance Stack a compliance certification?
No. It gives you a severity-ranked security review, injection defences, a written usage policy with acknowledgement, and a register of models and owners. These are useful evidence when customers or auditors ask questions, but we do not certify you against any standard or regulation.
What does the security and governance bundle save?
The four components cost 15 percent less as a bundle than bought separately, and the price panel shows both totals before you pay. The stack also links them with handoffs and 20 joint test scenarios, so audit findings feed the defenses and every system lands in the register.
How many AI applications are reviewed and defended?
Up to three systems or AI applications per component, agreed in writing during intake. Most teams name the same few assistants or agents across the audit and the injection defences. If you run more, a Change Quote covers the extra systems before any testing starts.
What happens to the weaknesses the audit finds?
They are listed by severity with remediation guidance, so your team knows what to fix first. Prompt injection findings feed the defences we add in the same project. Other fixes, such as changes to your own application code, are guidance for your developers rather than work included in the price.
How do staff acknowledge the AI usage policy?
Through the system AI Usage Policy System sets up, using one admin console or a written report as its channel. We draft the policy from your existing rules and up to 20 policy documents, you approve the wording, and staff acknowledgements are recorded so you can see who has accepted it.
Can the security stack be done faster before an audit?
Yes. Express and Rush delivery are offered at checkout, each with its date and price shown before you pay. Both depend on test access to the in-scope systems arriving within 72 hours, since each day of delay moves delivery by 3 working days.