Configure access.
Provide your domain and the access needed for testing.
Test the limits of your AI application.
Examine your AI application’s APIs, context boundaries and connected tools. Run targeted tests on the surfaces that are actually accessible.
- API and authentication
- Prompt injection
- Retrieved context
AI applicationInputs
Access
RAG context
Tools
Test your application’s trust boundaries.
A chat interface adds new paths to your data and tools. The AI/RAG profile follows these surfaces and presents observations in context.
View checksNeeds fixingNeeds recheckingFixed
Observations you can verify.
Review the evidence, identify the relevant check and prepare a fix. Findings keep their context between scans.
- Evidence associated with the finding
- Recommendations and a prompt for fixing the issue
- Confirmation by a comparable rescan
How to test your AI / RAG application
Run the checks.
Verify your domain, choose the specialized profile and run your scan.
Verify the fixes.
Review the evidence, apply changes and rerun the relevant tests.
AI / RAG checks, with context.
API and authentication
Discover AI routes and check their access, CORS and rate limits.
Prompt injection
Test model safeguards and exposure of instructions.
Retrieved context
Examine data isolation and retrieval boundaries.
Connected tools
Test URL access and potentially unauthorized actions.
Multiple surfaces.
One platform to monitor them.
WordPressAI/RAG is a specialized profile. Its checks depend on the technologies and access available on the verified domain.
Frequently asked questions
Start checking
the security of your site.
Find issues, prepare fixes and verify changes.
Keep your results together for the next deployment.
