Wardkey

Wardkey is a penetration testing firm for companies that ship AI. We test LLM chat features, AI agents with tool access, RAG search, MCP integrations and AI phone agents by hand, following injected instructions through to the actions they trigger and checking what leaks between customers.

For voice agents we place real calls and test caller identity checks, recording access, which tools a caller can trigger, transfers and consent. For multi-tenant SaaS built on Next.js, Supabase and Firebase we test tenant isolation, row level security, roles and SSO.

Every engagement is led by a certified tester named in the proposal. Findings are reproduced before they are reported; behaviour that varies between AI runs is reported as a rate. Confirmed issues come with a fix as a pull request and a regression test, your engineers review and merge, and a tester who did not write the fix retests it. Reports map to the OWASP LLM and Agentic Top 10, MITRE ATLAS, SOC 2 and ISO 27001, and a signed attestation letter follows once critical and high findings are closed.

Follow-on services: SOC 2 readiness and a fractional security lead. Wardkey is a brand of Meridal Group LLC, Sheridan, Wyoming. Testing is performed from the EU.