New: Compliance toolkits for the EU AI Act and NIS2 (cybersäkerhetslagen) — templates your auditor will actually accept. Browse toolkits →

Your Sprint is booked

Payment went through and Stripe has emailed your receipt and VAT invoice from Molnsys AB. Check spam if it has not arrived within a few minutes.

What happens next

  1. Within one business day I email you to agree dates and the one system in scope — an agent, an MCP integration, or a RAG pipeline. Mutual NDA if you want one; the Sprint does not require it.
  2. Before we start You send read access or book a walkthrough, plus 30 minutes to brief me. No production data: staging environments or synthetic data only.
  3. Two working days The threat-model walkthrough, run against the OWASP Top 10 for Agentic Applications 2026 (ASI01–ASI10).
  4. After An 8–10 page findings memo, each issue ranked by exploitability, then a walkthrough call with your team.

Want to get a head start?

Run your system through the Agent Security Scorecard before we talk. It takes about ten minutes and it means the first call starts from your answers rather than my questions.

Need to change something, or did not get the receipt? Email [email protected].

Cancellation and scheduling terms are in the Terms.