The wake-up call came from an external red-team exercise: testers got the client's customer-support AI to reveal its internal instructions and hand out discount codes it was never authorized to offer. Nothing had gone public — yet. Leadership wanted the exposure closed before it did, and the budget was six days, not a rebuild.
Mid-size e-commerce brand · Customer-support AI on the main storefront · Sentinel Guard + Auditkit · 6 days from kickoff to a clean re-audit.
The situation
The AI itself was doing its job — answering real customer questions, well. What was missing was everything around it: nothing inspected incoming messages for manipulation, nothing stopped an unauthorized discount before it reached a customer, and there was no record that could prove what had or hadn't happened during the red-team exercise.
A from-scratch build had been quoted at six to eight weeks. The board wanted an answer that quarter, not a project that owned it.
The engagement
Day one was the audit. Auditkit mapped everything the support AI could see and do, then ran the full attack library against it — independently confirming both known exposures and surfacing a third the manual exercise had missed.
Days two through four, Sentinel Guard went in front of the AI. Every conversation now passes through inspection before the AI acts: manipulation attempts are blocked, customer data is redacted from logs, and discounts now clear a business rule the AI cannot override — all without touching the AI or its prompts.
Days five and six were proof: Auditkit re-ran the same attack scenarios against the guarded system, and the go-live decision was made on evidence, not optimism.
The results
We were quoted eight weeks to build this ourselves. It took six days, and the re-audit is what let everyone sleep. — Head of Digital
The pattern
This engagement is the standard playbook: Auditkit answers "where are we actually exposed?", Sentinel Guard answers "can that exposure still be exploited?" — and the re-audit converts "we think we're safe" into a report you can put in front of a board.
Golam Mostafa leads the engagements behind these results. Planning something similar? Talk it through first.