TRUSCOR
Had an AI incident? Get rated
Services · How customers buy the technology

Every engagement ends in a score.

Each service is built from the same family of technologies. Fees are fixed, by subscription or hourly; never a fee that depends on a deal closing, a policy being bound or a claim being paid.

Fig. 01Every service is built from the same family
Service · built fromWhat it isWho buys
Ratings
O.W.L · SOVA Engine · TAFAAR · .sova
Essential, Standard, Complete, Vendor Risk, Portfolio, Enterprise and M&A. A private 300–900 score with the Financial Risk Report, the CISO Technical Report and the Evidence Pack in .sova.
AI startups, investors, enterprises Available
Retesting and Continuous Rating
O.W.L · TAFAAR · Black Box
O.W.L replays each finding for the Retest Report. Continuous Rating watches for drift; self-expiring ratings flag “retest due” when the system changes.
Rated companies and their customers Available
Shared vendor validation for Indian lenders
SOVA Engine · TAFAAR · .sova
Each vendor product tested once, deeply and with consent, then licensed to every lender as an input to its own sign-off.
Banks, NBFCs and brokers; independent validators Available
Oversight drills
O.W.L · SOVA Engine · Black Box
Kill-switch and human-review drills: time to halt, what keeps running, what state is left behind, and how often reviewers catch seeded errors.
Banks, NBFCs, brokers, Colorado and EU deployers, vendors Available
SOVA Black Box, custody and escrow
Black Box · .sova · O.W.L
The 24x7 recorder in your own cloud, with effect checks, hash-chained custody and escrow terms fixed before any incident.
Companies running AI in production Available
Incident forensics
Black Box · O.W.L · .sova
Sealed records and replay attribution establish what happened and whose fault it was. Fixed or hourly fees, never contingent on outcome.
Deployers, vendors, counsel, insurers Available
Certification verification
SOVA Engine
Validity and scope of a vendor’s SOC 2, ISO or AIUC-1 claim. A certificate never offsets a behaviour finding.
Anyone relying on a vendor’s certification Available
Questionnaires
TAFAAR
Security and AI-risk questionnaires answered from the published method.
Enterprises Available
Claim re-verification
O.W.L · SOVA Engine
A sample of a company’s claimed evaluations re-run in environments that check effects. Fixed fee, never deal-contingent.
Investors, acquirers, directors’ insurers, disclosure committees Available
Guardrail and tool test reports
SOVA Engine · O.W.L · SOVA OSS
Effect tests of guardrail and agent-security products, and behavioural ratings of MCP servers, skills and plugins, retested on every version.
CISOs, procurement, marketplaces, vendors (opt-in) Available
Agent payment evidence
O.W.L · Black Box
Mandate-fidelity tests in O.W.L storefronts, and recorded prompt, mandate and cart for chargeback disputes.
Merchants, payment providers, banks, networks Available
Data products
Corpus
Threat Intelligence Feed, India AI Incident Index, failure rates with denominators, the dependency map and AI event designation, built on the corpus.
Brokers, insurers, reinsurers, regulators Being built
Technology licensing
SOVA Engine · Black Box · .sova · O.W.L · Corpus
SOVA Engine Licence and White-label, Black Box OEM, SDK, Attack Library, Threat Feed, Conformance Test and O.W.L, under fixed fees with no rating advantage.
Pentest firms, Big 4, MSSPs, AI security vendors, agent platforms Available
Shared vendor validation for Indian lenders

Test once, deeply. License to every lender.

RBI’s June 2026 draft makes every lender validate vendor AI “regardless of any certification the vendor provides”. Hundreds of lenders buy the same few chatbots, KYC agents and underwriting engines. This is the credit-bureau model, applied literally.

1 · The vendorOne vendor productA chatbot, KYC agent or underwriting engine sold to many lenders.
2 · TRUSCORTested once, deeply, with consentSOVA Engine, TAFAAR, self-expiring ratings and oversight drills, in .sova.
Bank · own sign-off NBFC · own sign-off Broker · own sign-off Lender · own sign-off
Banks, NBFCs and brokers subscribe per vendor report. Independent validators can license the method at a fixed fee. TRUSCOR never issues a “validated” stamp that replaces the lender’s sign-off. The report and evidence are an input to it.
Who uses TRUSCOR technology

Eight audiences, one record.

Developers SOVA OSS, .sova, sova trace, SOVA Black Box; ratings when selling Free tools to record, test and debug their agents, and a score that unblocks enterprise and bank deals.
AI experts and security researchers SOVA OSS engine, arena, registry, .sova exploits, Extension SDK A shared, re-runnable language for AI exploits, recognition through the registry, and a toolkit no model vendor owns.
Enterprises (CISO, risk, procurement) Ratings, Vendor Risk Ratings, SOVA Black Box, oversight drills, guardrail test reports Evidence for boards, regulators and customers; proof their controls work; independent views of vendors.
Banks, NBFCs and brokers (India first) Shared vendor validation, oversight drills, self-expiring ratings A practical way to meet RBI and SEBI expectations without validating every vendor alone.
Investors Portfolio ratings, claim re-verification Behavioural due diligence, not just code review and vendor numbers.
Insurers, reinsurers and brokers Forensics, failure-rate data, dependency map, exposure estimates Evidence they can price, and fault findings for claims.
Regulators and courts .sova verifiers, court-ready exports, incident profiles, expert testimony Records they can verify without trusting the party who produced them.
Technology partners Engine Licence, Black Box OEM, SDK, Attack Library, Threat Feed, O.W.L, Conformance Test Capabilities they could not build quickly, under fixed fees, with no rating advantage.
Pricing rules

Hold price, drop scope.

See pricing
1Fixed fees and per-unit royalties only. 2Never a share of a partner’s sales to a client TRUSCOR rates. 3Never a fee that depends on a deal closing, a policy being bound or a claim being paid. 4Hold price, drop scope. 5Every engagement ends in a score. 6Over time, revenue tilts toward the parties who rely on ratings: buyers, investors, insurers and regulators.

Get rated.

Five fields and a short call. We reply within one working day.