Ordered by a tribunal to honor a refund policy its bot invented.
Free Website Bot Audit
Do you know what your bot said last night?
Most website chatbots will talk to anyone about anything: cake recipes, homework, even their own instructions. We test yours the way a stranger would, and send you what we find. Free.
Get the free auditFree audit
Get your free audit.
An open bot is an open door.
Close to a billion people talk to AI chatbots. Millions of business sites run one. Almost nobody tests them.
01
Your bill, their playground
Strangers use it as free ChatGPT. You pay per message.
02
Your data, one prompt away
A crafted message can pull out instructions, documents, even customer details.
03
Your brand, on the record
Invented discounts, made-up policies. Your company owns every word.
It already happened to bigger teams
Its bot sold a $76,000 Tahoe for one dollar. Legally binding, it said.
Its bot swore at a customer and wrote a poem trashing the company.
The technique behind most of this, prompt injection, is the number one security risk on the OWASP list for AI applications.
What we test on your bot
Five checks, run by hand on your public bot. Nothing installed, no access needed.
01
Off-topic abuse
Strangers using your bot on your bill.
02
Prompt injection
Can one message rewrite its rules?
03
Data exposure
System prompt, internal context, other users.
04
Brand safety
Promises and prices you never approved.
05
Human handoff
Does it know when to stop?
If there is a problem, we tell you exactly what it is and how serious. If your bot holds up, we tell you that too, in writing.
How it works
01
Send your site
30 seconds. Website, name, email.
02
We probe your bot
Five checks, by hand, safely.
03
You get the findings
A plain report. A short call if you want it.
Find out what your bot says when you are not looking.
Free, human-run, no strings. Worst case: written proof that your bot behaves.
Get my free audit