Sample report - What you will get, before you buy.
A redacted report from a real engagement, with the system owner's details removed. No email required.
Example finding
HIGHWK-012OWASP LLM06 Excessive agency
A caller can make the voice agent place calls to any number
- Reproduced
- 4 of 20 calls
- Root cause
- The callback tool accepted a number chosen by the model instead of the caller's verified line.
- Fix
- Callbacks limited to the caller's own number, set on the server. Pull request with regression test.
- Retest
- 0 of 20 calls. Closed.
- Summary. What was tested, when, by whom, and the result in one page.
- Scope and method. Systems, accounts, dates, the standards used and what was out of scope.
- Findings. Each with severity, affected component, proof, reproduction steps and the exact fix.
- Fix pull requests. Links to each pull request, who wrote it and who reviewed it.
- Retest. Before and after evidence for every closed finding.
- Standards mapping. OWASP LLM and Agentic Top 10, MITRE ATLAS, SOC 2 and ISO 27001 controls.
Attestation letter - One page, signed, verifiable
Dates, scope, method, the result of the retest, who wrote each fix and the name of the lead tester. Each letter has an ID that anyone can check on our verify page.
Send us the questionnaire your customer sent.
We will tell you which lines a test answers, in writing, within one business day.
Who we are
- CompanyMeridal Group LLCWyoming, United States
- TestingPerformed from the EUFor clients in the US and Europe