Hi HN, I built an assumption-driven AI security assessment for teams shipping AI features without a dedicated security team yet.
You paste your AI use case (what it does, data types, vendors, deployment). In ~10 minutes you get a PDF report by email containing:
- Trust boundaries + data flows + a threat model diagram (explicitly marked as conceptual/assumption-based)
- Threats mapped to STRIDE + MAESTRO (agentic AI)
- A risk rating (impact/likelihood) + 5×5 risk matrix
- Recommended security controls and compliance mappings (example: EU AI Act, NIST AI 600-1)
Important: we make assumptions (ex: AWS deployment, common patterns) and we call them out in the report so you can correct them.
You paste your AI use case (what it does, data types, vendors, deployment). In ~10 minutes you get a PDF report by email containing: - Trust boundaries + data flows + a threat model diagram (explicitly marked as conceptual/assumption-based) - Threats mapped to STRIDE + MAESTRO (agentic AI) - A risk rating (impact/likelihood) + 5×5 risk matrix - Recommended security controls and compliance mappings (example: EU AI Act, NIST AI 600-1)
Important: we make assumptions (ex: AWS deployment, common patterns) and we call them out in the report so you can correct them.
Link: https://raxit.ai/assessment
Would love feedback on what’s wrong, what’s missing, and what would make this actually useful in a real security review.