EXO/AUDIT.02
AI Access Audit
You gave AI the keys. We show you every door they open.
Your team is already using AI — the question is where, with what data, and with whose permission. Between sanctioned tools, shadow signups, and integrations nobody remembers approving, most businesses have no map of their AI exposure. This audit builds that map: every AI tool touching your business, what each one can reach, and the blast radius if one of them leaks.
Fixed price
$499
Founding five: $199 + a testimonial
01. What we check
01
Sanctioned AI inventory
Every AI tool your business officially uses — who approved it, what data it touches, what it costs, and whether anyone still uses it.
02
Shadow AI discovery
The signups nobody told IT about: browser extensions, free-tier accounts expensed quietly, integrations connected to your inbox or files. Found with your authorization, read-only.
03
Blast-radius map
For each tool: what data it can reach, who it shares with, and what happens if it leaks. One diagram that makes the risk obvious to anyone — no security background needed.
04
Egress risk scoring
Six risk rules across three severity tiers, scored against your actual setup — from 'annoying' to 'call your lawyer'. Each finding gets a plain-English explanation of what could go wrong.
05
Data flow tracing
Where your customer and business data actually travels once it enters an AI tool — including training-data exposure and third-party subprocessors most people never read about.
06
Access hygiene review
Who holds the admin keys, who's still got access after leaving, which integrations were approved by someone who no longer works there.
07
Revoke plan
One-click revoke guidance with human confirmation for every risky connection — what to cut, in what order, without breaking the tools you actually need.
08
Ranked fix list
Every issue ordered by blast radius, each with an owner and a date. The 30-day version of this list is usually three items long.
02. What you get
- Blast-radius map: every AI tool, what it reaches, what happens if it leaks — one diagram.
- Written findings with severity tiers (P1/P2/P3) and plain-English explanations.
- Revoke plan: what to cut, in what order, without breaking daily work.
- 20-minute screen-share: you hold the mouse, we walk through your actual exposure.
03. How it works
Step 1
You authorize, we discover
Read-only discovery across your workspace with your explicit authorization. We never change anything during the audit — looking only.
Step 2
We map and score
About a week to build the inventory, trace the data flows, and score every finding.
Step 3
You see the map
Screen-share walkthrough — you hold the mouse. Most owners are surprised by at least two things.
Step 4
Optional: Egress Watch
$500/month — continuous monitoring with P1/P2/P3 alerting and one-click revoke. For businesses where the audit found something worth watching.
04. Pricing
AI Access Audit
Full discovery, blast-radius map, findings, revoke plan, walkthrough. Founding five pay $199 + a testimonial.
$499 one-time
Egress Watch
Continuous monitoring, tiered alerting, one-click revoke with human confirmation. Metadata-only by default.
$500/mo
Shield
Deeper remediation program for businesses with serious exposure. Scoped after the audit.
Quoted
05. Fair questions
Do you need our passwords?
No. Discovery is read-only and happens with your explicit authorization — and on the walkthrough, you hold the mouse. We see what you show us, nothing more.
We're a small business. Is this overkill for us?
Small businesses are actually the softest targets — you hold real customer data with none of the enterprise security apparatus. The audit is sized and priced for exactly that reality.
Will this disrupt our work?
No. The audit phase changes nothing — it's observation only. The revoke plan is sequenced so cutting risky connections never breaks the tools your team relies on.
What if you find nothing?
Then $499 bought you proof — a documented map you can show clients, insurers, and partners. In our experience, 'nothing' is rare, but the map is valuable either way.
06. The other audits
AI Visibility Audit →
Once you're secure, get found: measure where your business appears in AI answers across five engines.
AI Opportunity Audit →
Your three highest-ROI automations, named and priced in one week.
Complete AI Checkup — $999 →
All three audits in one visit. Save $348 versus buying separately.
Ready when you are
You can't secure what you can't see. Twenty minutes, your mouse, our screen — and you'll know exactly where your business stands before the next headline about someone else's leak.