About Subcloak
AI agents now hold real tokens to real customer data. Most teams can't say how much access each one has. We started Subcloak to measure it.
What we believe
Measure, fix, prove.
- 01
Access is the multiplier.
A prompt injection that reaches a read-only tool is an annoyance. The same injection reaching a tool with export and admin rights is an incident. So we measure access first.
- 02
Show the method.
Our 32 checks, our sample report and our prices are public. You should be able to judge our work before you pay for it.
- 03
Small is a feature.
We take a limited number of audits each month, so the person you talk to is the person who does the work.
Who does the work
Founder-led, on purpose.
We're a small team by design. You talk to the people doing the work, from the first call to the signed letter.
- 01
A named tester on every report
The person who tests your system writes the findings and signs the letter. You meet them on the scoping call.
- 02
Senior hands only
Audits are led by our founder. When others help on larger jobs, they work under the same terms and are named in the report.
- 03
Research in the open
Our method, tools and research are public, so you can judge the work before you hire us.
How we work
Six promises, in every contract.
Signed authorization first
No testing of any system until a client representative has signed a written authorization and rules of engagement.
Staging before production
We test in staging or with test tenants. Production testing only with written approval and agreed limits.
Your data stays out of AI tools
Client data is never sent to third-party AI services without written consent. When AI helps, it runs on zero-retention API terms.
Deleted after 30 days
Working data is deleted 30 days after you accept the report, and you get a deletion certificate.
Fixed price, retest included
One price agreed up front. One retest within 30 days is part of it, not an upsell.
Public methodology
All 32 checks are published, with the standards they map to. You know exactly what you're buying.
Company
Subcloak is a Udyam-registered micro enterprise in India. We work with clients worldwide.
Contact
Security
Found a problem on our site? See our disclosure policy.
Find out what your agent can really do.
Thirty minutes, no slides. Tell us what your agent or app touches and when you need an answer. You'll have a fixed-price proposal within a working day.