Practice 03 · AI agent security
Agents in production, on your terms.
Agents are moving into production faster than the controls around them, and an agent that can call tools can move money, change records or leak data when it is tricked. We give each agent its own identity and the narrowest permissions that work, defend the paths prompt injection uses, and red-team the deployment against the OWASP agentic risks before it ships, so it passes security and regulatory review instead of stalling in it.
Scope
- Agent identity
- Least-privilege tools
- Prompt-injection defence
- Red-teaming
Why now
Security is moving from retrofit to mandatory spend.
AI
89%
Enterprise AI adoption
The share of enterprises now using AI, up from 55% in 2023.
Source: McKinsey, The state of AI in 2026
Where to start
One engagement, scoped to an outcome.
Start with · Pilot
Secure AI and agent deployment pilot
Put an agent into production with identity, least-privilege tools, data controls and red-teaming designed in from the first sprint, on a weekly delivery cadence.
- Type
- Pilot
- Shape
- 10–16 weeks
- For
- Regulated enterprises and their AI teams
- Diligence / Scoped in proposalAI and cybersecurity technical diligenceAn operator's read on the security, cryptography and AI claims behind a transaction, a vendor selection or a partnership, before you commit.
- Advisory / Monthly retainerSecurity architecture and resilience advisorySenior judgement on security architecture, resilience and incident readiness, on a monthly retainer, for teams that need it more often than they can hire it.
How to engage
Start small. Expand on evidence.
Most clients begin with a two-week readiness sprint and decide what comes next with the results in hand.
- 01
Readiness sprint
A fixed-fee, two-week sprint: an exposure heatmap, a Mosca analysis and your top ten priorities.
About the readiness sprint - 02
Pilot
A scoped discovery or secure-AI pilot with named senior leads and a weekly delivery cadence.
- 03
Partner
An ongoing advisory and migration programme, led by the same senior people who ran the sprint.
How we work
What you can hold us to.
Senior pods, named leads
The people who scope the work deliver it. No pyramid of juniors behind a partner.
Evidence over opinion
Every finding is tied to a named primitive, system and data class, so it survives audit.
Conflicts in writing
Where a recommendation touches a party we have a relationship with, we disclose it in writing before you decide.
Let's talk
Start with two weeks.
A fixed-fee readiness sprint: an exposure heatmap, a Mosca analysis and your top ten priorities.
Get in touch
contact@qctcapital.com