Service
System prompt and data leakage testing
System prompts often contain business rules, internal names and occasionally keys. Assistants connected to customer records can be talked into revealing someone else's. We try to get all of it out.
What we test
- Extraction of the system prompt and hidden instructions
- Cross-user and cross-tenant data exposure
- Leakage through summaries, translations and tool calls
- Secrets and personal data in logs and error messages
What you get
A list of what was extracted and how, with reproductions, and guidance on what should not be in a prompt in the first place.
Where the fix is in the setup (a prompt, a permission, a retrieval or guardrail setting) we make it and run the failed cases again. The test suite is yours to keep.
Who asks for this
SaaS companies adding an assistant to a multi-tenant product, and their data protection officers.
Contact
Tell us what your assistant does. We'll tell you how we'd test it.
Other work
- Prompt injection testing for AI agents
- Third-party LLM red teaming
- Independent AI assistant assessment report
- Chatbot hallucination and accuracy audit
- EU AI Act transparency testing for chatbots
- Custom evaluation datasets and grading rubrics
- AI agent tool and permissions review
- Crisis and vulnerable-user response testing
- AI vendor due diligence testing
- Regression testing for model upgrades