TRUSCOR
Had an AI incident? Get rated
Solutions · Enterprise buyers

Know what a vendor’s agent can reach before you install it.

A Vendor Risk Rating tests the AI system you are about to buy. You pay, and we need no access to your own systems.

01Inherited risk

Can you install this agent without inheriting invisible risk?

Vendors self-attest. We test the system independently, from the inside, the way it will be attacked and misused: what it can reach and what data it can read.

02The paperwork

A certificate shows governance exists. Testing shows behaviour.

We verify each certificate the vendor holds and record whether it was valid and whether its scope covered the system you are buying.

03The answer

A report your risk committee can use.

A Financial Risk Report: what the system can do at its worst, its estimated financial exposure and what reduces it, summarised in a private 300–900 score. We sell the vendor nothing else.

Per vendor system

Vendor Risk Rating

The enterprise buyer pays. No access to the buyer’s own systems.

$1,000 ₹45,000 · Per orchestration
Prices exclude GST · Price depends on scope, never on the score
Add-ons
Evidence Pack$250₹8,000Traces, test IDs, timestamps and artifacts in the open .sova format
Certification verification$200₹8,000Validity and scope of each certificate the vendor holds
Rush delivery+40%5 working days
Who needs a rating

A rating is for someone who has to trust a system they cannot inspect. An enterprise buying from fifteen AI vendors cannot inspect each one.

For CISO, risk and procurement

Proof your controls actually work.

Commission ratings before giving an agent write access, rate the AI vendors you buy, and show regulators that your controls work.

The SOVA stackHighlighted: the parts behind this page
Vendor Risk Rating SOVA Engine · TAFAAR

Rate the AI vendors you buy. ₹45,000 per vendor orchestration, with no access to your own systems.

Available

We check the validity and scope of a vendor’s SOC 2, ISO 27001/42001, AIUC-1 and pentest claims, for anyone relying on them.

Available
Oversight drills O.W.L · SOVA Engine · SOVA Black Box

We pull the kill switch inside an O.W.L test environment and measure time to halt, whether sub-agents and in-flight tool calls stop, and what state is left behind. We seed known errors into human review queues and measure how often reviewers catch them.

Available
Shared vendor validation for Indian lenders SOVA Engine · TAFAAR · .sova

RBI’s June 2026 draft makes every lender validate vendor AI. We test each vendor product once, deeply and with consent, then license the report and evidence to every lender as an input to its own sign-off. Never a “validated” stamp.

Available

Security and AI-risk questionnaires answered from the published method.

Available
Guardrail and AARM effect tests SOVA Engine · O.W.L

Detection and false-alarm rates on OWASP’s ten agentic risk classes, plus O.W.L checks that each “blocked” action had no effect and each signed receipt matches what changed. Published fixed fee, every result disclosed.

Available
Tool and skill behavioural ratings SOVA Engine · O.W.L · SOVA OSS registry

MCP servers, skills and plugins run inside instrumented environments, driven by agents, compared with what they claim, and retested on every version.

Available
Being built = the TRUSCOR corpus and its data products, which grow with every consented rating.

Get rated.

Five fields and a short call. We reply within one working day.