// AI security · AI governance · AI assurance
Know where your AI breaks, before attackers or regulators do.
Independent research on AI security and AI law, and hands-on assessments for companies that put AI in front of their customers.
EU AI ActNIST AI RMFISO/IEC 42001OWASP LLM Top 10GDPR
// Research
What’s actually happening with AI risk
We track AI security incidents and AI regulation worldwide, and write up what matters in plain English.
AI Security
Incident briefings
Dated, source-linked summaries of real AI security incidents: what happened, why it matters, and what to check in your own systems.
AI Governance
AI law, explained
Plain-English guides to the EU AI Act and AI rules around the world, with the deadlines and obligations that apply to real businesses.
Research
Research & white papers
Longer analysis of AI risk, controls and regulation, written for security, risk and compliance teams.
// Consulting
An advisor, not an adversary
Practical help for companies that use AI, from testing what you’ve built to getting your governance in order.
AI assistant stress test
We test your customer-facing chatbot or agent for data leaks, unsafe answers, prompt injection and missing escalation paths.
AI policy & governance review
We check your AI policies, inventory and controls against the EU AI Act, ISO/IEC 42001 and NIST AI RMF, and tell you what to fix first.
AI Act readiness
We classify your AI systems, map your obligations and deadlines, and build a practical roadmap your team can actually follow.
// Latest articles
Start here
-
What Is AI Governance? A Plain-English Guide for Businesses
AI governance is how an organisation decides which AI it uses, who is accountable for it, and how its risks are controlled. Here’s what…
-
The EU AI Act Explained: What Businesses Need to Know
The EU AI Act regulates AI by risk level and applies to companies outside the EU too. Here’s who it covers, the key dates,…
-
EU AI Act Risk Categories Explained, With Examples
Unacceptable, high, transparency and minimal risk: how the EU AI Act sorts AI systems, with real examples of each and how to work out…
-
EU AI Act Prohibited Practices: The 8 Banned Uses of AI (10 From December 2026)
Since February 2025, eight AI practices are banned in the EU, with two more from December 2026, and fines up to €35 million or…
-
The EU AI Act AI Literacy Requirement (Article 4): What It Means for Your Company
Since February 2025, companies that use AI must take steps to build their staff’s AI literacy. The 2026 Digital Omnibus softened the wording but…
-
Provider vs Deployer Under the EU AI Act: Which One Are You?
Your obligations under the EU AI Act depend on your role. Here’s the difference between a provider and a deployer, with examples and the…
// How we work
Sourced and dated
Every claim links to its source and carries the date it was true.
Independent
Paid work never changes what we publish.
Confidential
What we find inside your organisation stays with you.
Plain English
Frameworks turned into steps a real team can take.
Get the briefing
AI security incidents and AI law changes that matter, in a short email. No spam, unsubscribe any time.