How ready is your robot fleet for the 2027 clock?
Two minutes, six questions. Score your vision-language-action policies against the Embodied AI Security Top 10 and the compliance deadlines that are already arriving, and get an honest gap snapshot. Nothing leaves your browser until you choose to send it.
In our own tests, a single reworded instruction redirected a real SmolVLA policy out of its benign envelope 88% of the time (44/50, 95% task-clustered CI [72-100% CI]) against a 4% benign baseline. A task-success metric never sees that. The two families that did not transfer we report as 0% too. See the measured result.
What is coming, and when
Where you have evidence, and where you do not
The 8 categories a policy red-teamer can reach. EAI07 (CPS / firmware / comms) and EAI10 (evaluation / observability) are out of a VLA-policy red-teamer's scope by design.
Get your scoped next step.
We will send this snapshot and a scoped, honest recommendation for closing the gaps before your clock. No spam; a real person reads it.
You sign off on safety
Turn "is this safe enough?" into a number a notified body or insurer can review.
You build the policy
Run the red-team yourself, free and CPU-first. Every attack family ships in the open core.
From a self-check to signed evidence
The tool is free. If you need a defensible number an auditor or insurer can work from, this is the path. Pricing is a scoped starting range, not a fixed quote.
A red-team of your policy in simulation: an attack-success rate with a 95% confidence interval and a benign control, mapped to the EAI Top 10, with a SARIF report and a conformity-evidence dossier (candidate evidence, not certification).
Book a scoping call →Re-run the red-team each release, gate CI on the attack-success rate, and hold a rolling per-checkpoint regression baseline. Standing evidence for a moving policy.
Talk to us →The CLI, every attack family, an attack-success rate with a benign control, SARIF, the GitHub Action and local attestation are free and always will be. Run it yourself: pip install provael.
Get the tool →An insurer- and notified-body-facing dossier: the assurance views (ISO 10218-2 / IEC 62443 SL2 / insurer summary) with the honest per-family transfer statement. Evidence, not certification.
See the crosswalk →This self-assessment is an educational readiness signal, not a certification, a legal opinion, or a safety guarantee. Provael is a defensive, simulation-only tool for authorized testing. Not affiliated with or endorsed by OWASP, MITRE, or any standards body. Verify every regulatory date against the primary source.