What is an AI agent?
An AI system that takes actions as well as answering: it reads email, opens documents, updates records or makes payments, using tools it has been given access to.
What's prompt injection?
Hidden instructions planted in content the agent reads, such as an email, a document or a web page, that try to make it do something it shouldn't.
Do you need access to our live systems?
No. We test your agent against realistic replicas of its tools, so nothing real is touched. Production monitoring will be opt-in and is on our roadmap.
Can it run inside our environment?
Yes. Olyptic can be fully self-hosted, or UK-hosted. The AI judge can run on a local model, so your data never has to leave.
Which agents and frameworks do you support?
Agents that use MCP tools first, then integrations for common agent frameworks and agents that are only reachable through an API.
How is this different from red-teaming or model evaluations?
Model evaluations test a model in general. We assess a specific agent, with its own tools, in your context, and produce evidence your security team can sign.
Are you endorsed by NCSC?
No. We map our findings to NCSC guidance and the OWASP lists, but we're independent and not endorsed by either.