A founding rate, in exchange for a published case note.
3 places on the red-team assessment at the founding rate, for teams that agree to publish the result as a case note. Provael has no customer logos, testimonials or published case studies yet; this programme is how that changes. The ordinary route stays confidential, so nobody agrees to publication by accident.
- A named checkpoint, run in your environment or against an endpoint you host — the same scope as any red-team assessment.
- A two-line quote from the person who owns the policy, approved by you before it is used.
- A published, anonymised-if-you-prefer case note on /findings after a 14-day review window in which you correct any fact — and in which an unflattering or null result stays in.
- The founding rate: $5,000 against $25,000 list, for the same scope and everything every paid engagement includes.
- One retest after you remediate, so the published note can carry the fixed number beside the found one.
- Your name in the acknowledgements of the product and the study, if you want it; anonymity if you do not.
3 of 3 places open as of 20 September 2026. The count is kept by hand and dated, never a live counter. After the founding places the early rate is $9,500 for 3 more, then the standard rate; every price is on /pricing.
You see the note before it is public. You cannot withdraw the result.
Permission is granted item by item in the schedule you sign: name, logo, quote, the measured numbers, the case note. A factual correction during the review window is not negotiable. In return for the founding rate you give up one thing: pulling a result because it is unflattering. We publish nulls anyway, and a high attack-success rate is published beside its remediation and the retest. If your organisation cannot agree to that, the ordinary assessment is confidential, at the rates on /pricing.
What a published study contains, and what anonymisation removes, is on /case-studies (which holds none yet, and says so). What every paid engagement includes is on /assessment; the deliverable itself is the sample evidence pack. You keep the data: the assessment runs in your environment and nothing transfers rights in your checkpoint, weights or traces.
Applying
A 30-minute scoping call settles whether your stack is a fit and whether your organisation can agree to publication. Apply by form, or ask for the call first.
Evidence, not certification. Provael measures policy behaviour in simulation; a report is candidate evidence toward an assessment, never a safety certificate or a notified-body opinion.