Skip to content

About us - Security testing that ends in a fix.

Wardkey tests AI agents, voice agents and multi-tenant SaaS by hand. Every finding is reproduced, every confirmed one comes with a fix, and every fix is retested by someone who did not write it.

Every engagement is led by a certified tester who is named in your proposal and on your report, and who signs the attestation letter. Testing is performed from the EU for companies in the United States and Europe.

We take on a limited number of tests each month, so the same lead tester stays with your test from the first day to the retest.

Findings in our last full platform audit
105
Authorization checks in one SaaS pentest
141
To take an exposed store offline
40 min

Our principles - We sign what we can prove.

Every report and letter carries the name of the person who did the work.

  • Independent. You review and merge every fix. The person who wrote a fix never retests it, and the letter states who wrote it.
  • Evidence first. Every finding is reproduced before it reaches the report. We write what the evidence proves and what it does not.
  • Scope before invoice. The price is agreed in writing before we start. If the scope changes, we agree the change in writing first.

Who tests your product

  • Certified testers

    Every test is led by a certified tester. You see the name and certification in your proposal, before you sign.

  • Named on the report

    The lead tester is named on the report and signs the attestation letter on behalf of Wardkey.

  • Same lead, start to retest

    One lead tester stays with your test from the first day to the retest. Fixes are retested by a tester who did not write them.

From our research

Short, practical notes on how AI agents and voice agents fail, and what to check before a customer asks.

What voice agent platforms leave to you

October 12, 2026

Three defaults to check before your AI phone agent goes live: recordings that never expire, caller identity and tool authorization.

Read more

Testing tenant isolation in RAG systems

October 5, 2026

Why a vector store shared by all your customers needs the same isolation tests as your database, and how we run them.

Read more

Send us the questionnaire your customer sent.

We will tell you which lines a test answers, in writing, within one business day.

Who we are

  • CompanyMeridal Group LLCWyoming, United States
  • TestingPerformed from the EUFor clients in the US and Europe