Skip to content
Unmesha Technologies, security assessments

Know what your AI feature can reach before your customers ask

You’re shipping an assistant or an agent, or a questionnaire has grown an AI section. We work out what it can read and do, whether a message can steer it, and what to tell your customers.

Request a free callWhat it costs

Free 30-minute call. The assessment is a fixed fee, confirmed before any work begins.

Unmesha security assessmentsUM-SA-001 · Revision 4.0

AI feature: what it can read and do

Fernleaf’s assistant answers questions about a customer’s billing. We mapped what it can reach and tested whether a document could steer it.

Who it’s for

Customers asking about the AI assistant

What we checked

What the assistant reads, which actions it can take, and whether an uploaded document or a message can change what it does.

What it can reach

It reads
The asking account’s invoices and the documents its users upload.
It does
Searches, summarises and drafts. Sending email is switched off for now.

What we found

  • Search could return another customer’s documents (AI-01, High).
  • Hidden text in an uploaded statement made it queue an email outside the company, with no one signing it off (AI-02, High).

In place now

  • The send action is switched off until each send needs a person’s sign-off.
  • The assistant runs under its own role, with no access to payment details.

Planned

  • Search filtered by account, by Fernleaf’s developers from our pattern4 to 6 weeks
  • A verified sign-off for each send, tied to the recipient and the report4 to 6 weeks
  • Cloud monitoring: alerts on the assistant’s actions1 to 2 weeks
  • Our retest of both fixes, one round includedAfter the fixes

Evidence

Every answer on this page points at an item in the evidence index on page 24: exports, policy files, restore logs.

Questions

Want the detail behind a line? Ask Fernleaf for the finding pages, and we’ll walk you through them.

Fictional sample. The company, systems and data are invented; no real client was assessed.

Prepared by Unmesha Technologies for Fernleaf Billing Ltd
An example of the one-page summary you forward, from our fictional sample report.Read the whole sample report

When you need it

Usually one of these, often with a date attached.

  • You’re about to ship an AI feature that reads customer data or takes actions.
  • A customer’s questionnaire now has an AI section.
  • Your assistant can call tools, send email or change records.

What you get, and what it costs

Step 1 is the assessment, at one fixed fee. Step 2 is only the fixes the person asking needs. Every fix, with prices.

Step 1: what the assessment includes

  • A map of what the feature can read and do, drawn so your customers can follow it.
  • Hands-on tests of whether a document, email or message can steer it.
  • The limits to put in place, split into the fixes we make and your developers’ items.
  • The AI section of a questionnaire answered, or a one-page note for customers.

How it works

Three steps. You know the price before each one starts.

  1. A free call

    Tell us what you need and who’s asking. We’ll say what we’d check and give you a fixed price.

    30 minutesFree

  2. We check your product

    Your app, your cloud and how code gets to production. You get a report, a plan and a one-page summary to send to whoever’s asking.

    About two weeksPrice on the call

  3. We fix what’s missing

    We set up what your product lacks, like MFA, alerts and tested backups. Your developers make any code changes, with our help. Then we retest, at no extra cost.

    Fixed price per fixfrom €2,300

Before you enquire

What people ask us most. Anything else, ask on the call.

Is this a pentest of the AI?

Partly. We test the feature by hand with the inputs an attacker would use. Most of the value is the map of what it can reach, which no test produces on its own.

What do you need from us?

The form, questionnaire or report, and a call with whoever runs your cloud and your workspace. For a fix, a named admin account for the systems it changes, set up the way we describe on the call.

How do you handle our admin access?

You create a named account for us with only the rights the fix needs, and you can see everything it does. We never use shared logins. Each fix lists its changes, when they happen and how to roll them back, and you remove the account when the fix is done.

How do you handle confidential material?

Send an outline first and leave out passwords and customer data. We only ask for anything sensitive once we’ve agreed the scope and a safe way to share it.

Tell us what the feature does

What it reads, what it can do, and when it ships.

What happens next

  1. We reply within one working day. We set up the call, and you meet the people who’d do the work.
  2. We send a proposal with the scope, the timing and a fixed fee.
  3. Work starts when you say go.

Sending an enquiry doesn’t commit you to anything. About the team

Request a free call

Send a short outline of what you want checked and any deadline.

Email Unmesha

Please leave out passwords and customer data. How we handle enquiry information.