AI agent security assessment

Your best people are already building AI tools.

Staff wire AI assistants into inboxes and files to save time, and mostly they work. None of them have been assessed. Secondsign works out what each agent can read, where your information goes, and gives your IT provider a clear, ordered fix list.

Ask us to look at one agent

Start with the one you know about. The conversation takes 20 minutes.

The quiet part

What these assistants usually hold

A real person’s password.

Not a limited login of their own. Whatever that person can open, the agent can open, around the clock, unattended.

The run of an inbox or a file store.

Patient correspondence, client files, results. The agent reads whatever arrives, whether or not it was ever meant to.

A line to an overseas AI service.

Often a free account set up in minutes. Those services keep what they are sent, and nothing records what has already gone.

The assessment

One agent assessed, one page back

We assess the agent, write the findings on a single page in plain language, and hand your IT provider an ordered fix list they can action straight away.

Agent assessment report One page

What we check, and what you see.

✓ What the agent can reach, and where your information goes

✓ Whose credentials it holds, and what it could do with them

✓ Whether a crafted email or document can trick it into acting

✓ Who would know if it misbehaved

✓ The machine it runs on, and who else can reach it

✓ An ordered fix list for your IT provider

A re-test once the fixes land. The report joins the same record your other Secondsign checks build.

Until someone looks, no one can say what has left the practice.

We work alongside your existing IT provider rather than replacing them. We identify the risk, specify the fix, and hand clear instructions to your provider. Your provider does the work and invoices you directly.

The staff member who built the agent usually built something worth keeping. The assessment is how it stays: on its own account, with its own limited keys, with a record of what it does.

Specimen layout, not a real practice. We tailor the assessment to your practice and your profession.

Secondsign is backed by Notion Digital Forensics

Notion Digital Forensics is an Australian digital forensics practice. Its principal, Matt O'Kane, has been in IT since 1996 and in security and digital forensics since 2018. He has given expert evidence in the Federal Court of Australia and the Supreme Court of New South Wales. Your assessment carries his signature, and his practice responds if something happens.