01
You bought Cursor, Copilot or Claude seats for engineering and cannot tell the board what they did with them.
DARK VECTOR COGNITION · AUSTIN, TEXAS · AGENT SECURITY ADVISORY
Know what your AI agents did last week.
Agent Flight Check is a two-week, fixed-price audit: every agent, MCP server and coding assistant in the agreed scope, the permissions behind them, and ten days of tamper-evident records of what they actually did. Recorded on your machines with Witness, our open-source flight recorder. Nothing leaves your network.
FIXED
Two weeks, $7,500, one deliverable
LOCAL
Records stay on your network; you keep them
OPEN
Witness is Apache-2.0; verify the chain yourself
INDEPENDENT
We sell no platform, no seats, no agents
WHO THIS IS FOR
You need this if any of these is true:
The Flight Check is built for the person who will be asked, in a board meeting or an incident review, what the agents did — and has to answer from evidence rather than recollection.
02
MCP servers and agent extensions are appearing on developer laptops and nobody owns the inventory.
03
An agent has production credentials and the only record of what it did is a chat log.
THE OFFER
Two weeks. One price. Evidence you keep.
A fixed-scope diagnostic with a named deliverable and a date on it. No platform licence, no per-seat fee, no data hosted by us. How we handle your data →
Install and interview
Witness is installed as a transparent proxy in front of your MCP servers and agent runtimes. We interview the owners of each agent and reconstruct the approval history.
Record and analyse
Ten days of live traffic accumulate. We correlate actions against permissions, reconcile the inventory, and draft the findings.
Readout
Report, remediation plan, and evidence export delivered. Readout call with leadership. You keep the recorder running or switch it off.
$7,500 for the full Flight Check.
Credited in full against a remediation build signed within 60 days. If the report says nothing needs fixing, you paid for a clean bill of health with the evidence to prove it.
01
Agent & MCP inventory
Every agent, model, MCP server, connector, and tool inside the agreed scope — up to twelve endpoints in the first pass — including the ones nobody remembers installing. Anything found beyond scope is listed, not audited.
02
Permission map
What each one can read, write, publish, purchase, or never touch — and who approved it, and when.
03
Ten days of records
Agent actions recorded inside your boundary as a hash-chained, tamper-evident timeline. Read-only. Nothing leaves your network.
04
Findings report
Risks, coverage gaps, and reliability failures — ranked, with the evidence that supports each finding.
05
Remediation plan
What to fix, in what order, with a build estimate engineering can act on the same week.
06
Leadership readout
Sixty minutes with your engineering and security leads. Questions answered from the record, not from slides.
THE FOUNDER
Who does the work
Flight Check is delivered by the person named on the contract, on your estate — everyone who touches your systems is named to you before access, not staffed out to a team you meet on the kickoff call.
Al Sharma runs Dark Vector Cognition. Before this he led post-sales and field engineering teams at Snyk, HashiCorp and Harness, and most recently ran Technical Success for the Americas at Port.io, where his team carried Fortune-100 financial services, insurance, media and sports accounts through production rollouts of platform and AI tooling. He has sat on the vendor side of the exact pitches your team is getting now. Flight Check is DVC on your estate for two weeks — not a junior team with a slide deck.
PROOF
What a Flight Check finds.
Six patterns that recur across agent estates. Each one is worked through end to end — what we saw, why it matters, and the evidence — in the sample readout.
- 01An MCP server with filesystem write access and no named owner
- 02A coding assistant using production credentials on a “read-only” task
- 03Secrets passed as tool arguments in plaintext
- 04A tool-call error rate high enough that the agent is retrying blind
- 05Two agents with overlapping permissions and no approval record for either
- 06Config drift: the MCP config on developer machines differs from the repo
SECOND OFFER · AI SPEND AUDIT
What did the AI seats actually do?
$9,500, fixed for a three-week audit of your Copilot, Cursor and Claude spend: real usage per seat, code attribution in your repositories, and the number your CFO is asking for at renewal. Built for the budget owner rather than the security owner — same method, different question. See the AI Spend Audit →
FIELD NOTES
Written from the work.
Build logs and rulings from running this studio's own agent estate. Published when there is something real to report.
TWO WEEKS · $7,500 · NOTHING LEAVES YOUR NETWORK
Find out what your agents did last week.
Thirty minutes to confirm scope and dates. If the Flight Check isn't the right instrument for your estate, we'll say so on the call.
ALSO FROM THE STUDIO