Website information is not an engagement or testing authorization.

General information only

Website content describes potential professional services and public operating boundaries. It is not legal advice, a compliance opinion, certification, attestation, security guarantee, or recommendation for a specific system.

No engagement or authorization

Viewing the website, preparing or sending a consultation request, exchanging email, or participating in an introductory conversation does not create a client relationship and does not authorize access, scanning, exploitation, testing, or evidence handling. Work begins only after both sides accept written scope, authorization, commercial terms, and evidence-handling requirements.

Public descriptions and fees

The website describes four public engagement routes: Agentic Assurance Snapshot, Agent Authority and Blast-Radius Review, AI Architecture and Control Assurance, and Enterprise Independent Validation. Availability, acceptance, system boundaries, timing, deliverables, fees, and payment terms are confirmed in the accepted written scope. A public description is not an offer that can be accepted by submitting the form.

User responsibilities

Provide accurate, high-level business information and only information you have authority to share. Do not send secrets, source code, customer data, logs, confidential architecture, regulated information, or system access through the public channel. Do not misuse the website, interfere with its operation, attempt unauthorized access, or use it to target another person or system.

Professional-services boundary

Findings reflect the defined evidence, scope, and review period. No assessment can identify every defect or eliminate risk. Unless expressly included in writing, services exclude implementation, managed security, incident response, ongoing monitoring, destructive testing, legal advice, certification, and formal compliance attestation.

Research-project boundary

Public research and experimental projects listed on the Research page are not client engagements, certifications, approved controls, endorsements, or guarantees. Their separate documentation governs their status and permitted use.

Intellectual property

The website design, public methodology descriptions, and original materials may not be republished as another provider's work. Rights in client deliverables and client-provided materials are governed by the applicable written engagement terms.

Availability and changes

The website, content, assessment descriptions, research references, and inquiry channel may be changed, suspended, or withdrawn. To report a security issue, use the security contact. Other questions may be sent to security@leftoutsecurity.com.