Discovery Assessment: AI Security Gap Analysis

Fast AI security gap analysis mapped to OWASP LLM Top 10, ISO 42001, NIST AI RMF, and EU AI Act. Single AI system, up to 3 endpoints. Internal use only - not for regulatory submission.

$3,500 • 5 Business Days • $3,500 credit toward full assessment if you upgrade within 30 days

What's Included

  • Single AI system (up to 3 endpoints)
  • Targeted subset of 600+ security tests
  • 5-7 page discovery report
  • Critical/high vulnerabilities mapped to OWASP LLM Top 10, ISO 42001, NIST AI RMF, EU AI Act
  • Clear upgrade recommendation: Technical Compliance Assessment needed or not
  • $3,500 credit toward full assessment if upgraded within 30 days
  • Static baseline coverage only (no adaptive follow-up or accuracy verification)

Best For

  • Decision tool - not for regulatory submission
  • You need a quick AI security pulse check
  • You want gap analysis before budget approval
  • You need a go/no-go decision on full assessment
  • You plan to credit the spend toward the full assessment

⚠️ Not suitable for regulatory submission or customer security requirements

Request Discovery Assessment

$3,500 • 5 business days • Up to 3 endpoints

Request Assessment →

Or email us directly: audit@testmy.ai

Need full assessment with evidence documentation?

Request Technical Compliance Assessment ($9,500, up to 5 endpoints) →

Frequently Asked Questions

How is this different from the $9,500 Technical Compliance Assessment?

This is a decision tool - not for regulatory submission. We test your system to help you identify critical security gaps. It's faster (5 days vs 7-10) and cheaper, but doesn't provide evidence logs, adaptive follow-up, fix guidance, or Technical Assessment Report documentation.

What if I need to test multiple endpoints?

Discovery covers 3 endpoints. For 4-5 endpoints or regulatory submission, upgrade to Technical Compliance Assessment ($9,500).

What's included in the report?

5-7 page executive summary: Critical/high findings, compliance impact across frameworks (OWASP, ISO 42001, NIST, EU AI Act), general remediation categories, recommendation on full assessment. NOT included: Evidence logs, reproduction steps, medium/low findings, re-test, or Technical Assessment Report. Think of it as a 'health screening' - identifies problems, but not the full documentation needed for compliance.

Upgrade Path

If you decide to proceed with Technical Compliance Assessment after receiving your discovery assessment, the $3,500 you've already paid will be credited toward the $9,500 assessment price (if upgraded within 30 days).

Discovery → Full Assessment = Only $6,000 more