AI agents are software with hands: they read your documents, call your APIs, and act in your systems. Bullet Proof Software assesses and hardens that new attack surface – the SoftwareMile specialist practice for secure engineering, applied to AI.
Threat Modeling for AI Agents
What can the agent read? What can it change? Who can make it do so? We map agent capabilities, tool access, token scopes, identities, and data flows – then work through misuse cases: prompt injection, data exfiltration through tool output, privilege escalation via chained tools, and poisoned context sources.
MCP Server Security Review
MCP servers are security boundaries between AI and your infrastructure. We review authentication and transport, tool scoping and input validation, secrets handling, logging sufficiency, and whether approval gates actually gate the consequential actions.
Guardrail and Permission Design
Least-privilege tool design, human-approval workflows for irreversible actions, audit trails that reconstruct what an agent did and why, and evaluation criteria that catch unsafe behavior before rollout.
Independent of the Builder
We review agent systems whether or not our sister practice SoftwareDepo built them – and when it did, this review is independent by design: different practice, different engineers, different incentives.
Describe your agent or MCP deployment – platforms, tools exposed, data sources, and what the agent is allowed to do. We will scope a review with clear deliverables.