Q9 Continuous Diagnostic.
A focused week, a clearer picture.
A one-week AI penetration test for the LLM-powered application your team is actually building. Q9 Continuous runs AI-driven tests; every finding is reviewed by a person before it is reported.
- Agreed scope
- Human-reviewed findings
- Written authorisation first
How we work
A week with a purpose.
The schedule is agreed during scoping. Access, application complexity, and availability affect what can be covered.
- 01 / Before testing
Agree the boundaries
Confirm the application, authorised owners, environment, accounts, scope, and rules of engagement.
- 02 / During the week
Test the real behaviour
Explore instruction, data, and tool boundaries with scoped tests and reproducible evidence.
- 03 / Review & handover
Make the findings useful
Review results, explain limitations, and walk through prioritised findings with your team.
Application-specific coverage
The access matters
as much as the model.
We focus on what your application can see, decide, and do. Coverage is confirmed in your statement of work.
Instruction manipulation
Direct and indirect prompt injection, where applicable.
Information boundaries
Data exposure, retrieval controls, and user or tenant isolation.
Connected capabilities
Tools, permissions, workflow actions, and downstream effects.
What you receive
Evidence your team
can work with.
- A scope and coverage record, including limitations
- Human-reviewed findings with severity and context
- Evidence references and remediation guidance
- A walkthrough with your team
- An agreed route to re-test fixes
Testing requires written authorisation and agreed access. No test starts simply because a form is submitted.
After the Diagnostic
Keep the evidence
connected.
A Diagnostic is a point-in-time test of an agreed scope. It is not a certification and does not guarantee that every risk has been found.
How Q9 Continuous fits togetherContinuous AI Pen Testing
Re-testing after fixes and significant changes. From £1,200 per month.
Q9 Driftmark Early access
Change visibility against the checked state, and approved public proof. From £99 per month.
Related
Where the Diagnostic fits.
The Diagnostic runs on Q9 Continuous. Continuous AI Pen Testing carries the same scope forward after it.
Let’s talk about your AI
Start with a conversation.
Tell us what you’re building and where you need confidence. We’ll help define a sensible scope.
Your application, the data it can access, and the decisions it can make.
Please don’t include credentials, personal data, or confidential security findings.
Prefer the full contact page? Open it here.