
“Before opening our AI platform to additional business units, we deliberately commissioned an external pentest of the security-critical components. The scope covered our SSO fronting the internal services, the AI agents themselves, and the shared data plane. DeepMantis examined all of these with a combined blackbox and greybox approach. What was particularly valuable was that the identified vulnerabilities came back clearly prioritized and described with concrete, technically actionable measures. These included, among other things, improvements to our authentication flows, hardening of service-to-service communication, and tightening of overly permissive entitlements in the data plane. For us, what mattered most was that the findings were not only theoretically sound but practically shippable.”