Start free. Pay for the work you cannot run yourself.
The tool that red-teams your policy is free and open-source. When you need a run you can't do yourself, start with the Checkpoint Report, a fixed $1,950.
Offers
For the engineer
Open-source tool
Run the full red-team yourself. Every attack family, the attack-success rate with its benign control, SARIF and local attestation are in the free tool.
- The CLI and every attack family
- Attack-success rate with a 95% confidence interval and a benign control
- SARIF, OSCAL and a CycloneDX ML-BOM + the GitHub Action CI gate
- The Embodied AI Security Top 10 + local Ed25519 attestation
pip install provaelFor an entry measurement at a fixed price
Checkpoint Report
One eligible checkpoint on an agreed simulator and task set, under a written protocol. Eligibility is confirmed by a short form and a human reply before anything is sent or paid. Credited in full against a later assessment.
- One checkpoint of yours on one supported simulator and task set: the agreed tests that apply, with matched benign and clean-task-success controls, at an agreed run budget
- The measured attack-success rate with 95% confidence intervals, the release decision under the agreed acceptance protocol, and an engineering review of the findings
- The evidence pack: SARIF, the per-trial traces, a test report laid out like ISO/IEC 17025 clause 7.8 (not accredited), a local Ed25519 attestation - and one retest allowance stated in the work order
- Delivery within five business days after scope, access and the agreed payment prerequisites are complete; unsupported adapters, simulator work or new calibration research are quoted separately
For the team shipping a policy
Red-team assessment
- Founding design-partner rate $5,000 · 3 of 3 places open
- Early rate $9,500 · 3 of 3 places open
- Standard rate $15,000
An independent, human-led red-team of your policy in simulation, with an evidence pack you can file. A lower rate with a fixed number of places shows how many are open.
- A human red-teamer operating on your own policy, not a public proxy checkpoint: threat model chosen for your stack, the run executed and reviewed with you
- Stack-specific integration of the adapter and simulator, and the keep-out predicate tuned to your declared safety envelope where the run supports it (stated as tuned, never as validated calibration)
- Narrated attack chains + a filable evidence pack (SARIF, OSCAL, ML-BOM) under a written acceptance protocol
- One free retest after you remediate; the Ed25519 attestation establishes origin and integrity of the pack, not insurer or assessor acceptance
Want a first result before you pay? Request a free scan: name the checkpoint you ship, and we run the same measurement with you, in your CI and in simulation, for free. If you use a public checkpoint, we may have run it already.
For a policy that keeps shipping
Assurance subscription
Evidence that keeps up with a policy that keeps changing: the red-team re-run each quarter and CI gated on your acceptance protocol, for one annual fee. No subscription has been sold yet, and none is implied.
- A quarterly retest, with new attack families covered as they are added
- A rolling per-checkpoint regression baseline
- CI gated on your acceptance protocol (critical slices and the pooled threshold)
Fine print
- The deliverable. The sample evidence pack is the core of what every paid offer delivers: a public reference run, published in full, mapped to the EU Machinery Regulation, ISO 10218:2025, IEC 62443 and the NIST AI RMF. Each card says what its offer adds. The open-source tool emits SARIF, OSCAL and a CycloneDX ML-BOM itself.
- One maintainer. Provael is built and maintained by one person. That is a real dependency for anything you rely on. The tool is Apache-2.0 and can be forked, and every result can be reproduced from a committed recipe, so evidence you already hold stays valid if the project stops. One person cannot offer a service level, so none is published.
- The counterparty. A private limited company is being incorporated in Ahmedabad; from its incorporation (expected January 2027) paid contracts are with the company. Until then the counterparty is Sattyam Jain, an individual (India), operating as Provael. Professional-indemnity cover is bound at the signature of the earliest paid contract and is reflected in these fees; until then none is held, as /trust says.
- What a report is. Evidence, not certification. Everything Provael runs is defensive and in simulation, against systems you own or are authorized to assess, and a report is candidate evidence toward an assessment.
- Due diligence. The answered security questionnaire, sub-processors, DPA and rules-of-engagement templates, and what the tool never receives, are on /trust. The tool has ~600 downloads a month on PyPI (PyPI counts include mirrors and CI, so a weak signal); every distribution figure is on /adopters.
- The founding rate. It is paid for with a published case note; the terms are on /design-partners.
- The Top 10. The Embodied AI Security Top 10 in the free tool is an independent community project, not affiliated with or endorsed by OWASP.
Start with the free tool, or with one checkpoint.
The quickstart runs on a CPU in minutes, with no sales call. When you want the run done on your own checkpoint and reviewed, check whether it is eligible for the Checkpoint Report. Not sure where you stand? Take the checklist.