Hi all. I am Loki, a co-founder at SecureMid: https://securemid.com SecureMid does automated adversarial testing of AI agents and LLM applications. In plain terms, it tries to get an agent to do things it should not do, and reports where it succeeded. The tests are mapped to the OWASP LLM Top 10 and NIST AI RMF, and it uses an air-gapped local judge, so the evaluation runs locally rather than sending the material out. Why we built it: As engineers, we know a system is only trustworthy once you've tried to break it, so we built SecureMid to break AI agents before attackers do. Agents are being given tool access, API keys, and access to live and sensitive systems faster than they are being security-tested. That gap is what we kept coming back to. A bit of background: SecureMid was started by a group of friends, and I joined them as a co-founder. We are bootstrapped. The product is at v1.0.0-pilot and the website is ready, and we are now looking for our first pilot users. That is also why I am posting here - we do not have outside feedback on this yet, and I would rather hear what is unclear now than guess. It is meant for teams building and deploying AI agents or LLM apps, especially where the agent can call tools, use API keys, or reach live systems. I would value honest feedback on a few specific things: From the site, is it clear what is actually tested, and what is not? Are the OWASP and NIST mappings useful to you, or does that framing get in the way of understanding the product? If you were considering a pilot, what would you need to see in a sample result or report before you trusted it with a real agent? Happy to answer questions about how it works, and happy to be told where this does not make sense. I will stick around in the comments.   submitted by   /u/loki_singh [link]   [comments]