Editable AI security operating kits

Move from "we should check that" to evidence you can use.

Practical workbooks, test plans, and operating documents for teams shipping AI agents. Built to support a real decision, not fill a policy folder.

45-60 controls in the technical kitsEditable files throughoutClear owners, evidence, and decisions
Choose the smallest useful kit

Three starting points. One operating ladder.

Start at the release gate, go deeper on MCP, or put the governance layer around the whole portfolio.

AI Agent Launch Gate workbook cover
01 / RELEASE

AI Agent Launch Gate

45 controls, evidence fields, and a ship-or-hold decision for your next agent release.

$29
one-time
  • Editable Excel control workbook
  • Evidence and remediation log
  • Severity-weighted release decision
  • PDF field guide and 30-day plan
Get the launch gate →
TECHNICAL REVIEW
MCP Security Review Kit workbook cover
02 / MCP

MCP Security Review Kit

A 60-control MCP review, threat model, negative-test plan, and release decision for tool-connected agents.

$69
one-time
  • Client-to-side-effect threat model
  • 12 negative-test scenarios
  • Tool and resource inventory
  • Evidence, remediation, and release sheets
Get the MCP review kit →
AI Governance Operating Kit workbook cover
03 / GOVERNANCE

AI Governance Operating Kit

Policy, inventory, risk, vendor review, incident response, and a 90-day rollout for small teams.

$129
one-time
  • Acceptable-use policy and intake forms
  • System inventory and risk register
  • Vendor review and control mapping
  • Incident playbook and 90-day rollout
Get the governance kit →
How the ladder works

Use the kit that matches the decision in front of you.

BEFORE RELEASE

Can this version ship?

The Launch Gate gives one product team a defensible release decision.

WHEN TOOLS ARE CONNECTED

Can the agent act safely?

The MCP kit traces identity, authorization, transport, tools, credentials, files, and downstream effects.

ACROSS THE COMPANY

Can we govern AI use?

The Governance Kit connects policy to inventory, owners, risk, vendors, incidents, and review dates.

Scope: These kits are practical starting points, not certifications, legal opinions, penetration tests, or promises that a system is secure. Validate each control against your architecture, data, contracts, and regulatory obligations. Test only systems you own or are authorized to assess.

Need someone to test the real system?

The kits help you organize the work. GaleOps can review the architecture, attack paths, controls, and evidence with your team.

Request a free snapshot →