Is your org exposed the way Hugging Face was?
A 14-field diagnostic scoring your organization's exposure to agent-facilitated supply-chain incidents — the same failure class behind the disclosed autonomous-agent breach.
Do any of your agents call third-party tools, plugins, or MCP servers you didn't build?
Reduced scope: low inherent exposure — for now
Agents that only run your own code against your own data sit outside the incident class this diagnostic scores. Running you through 14 fields about a perimeter you don't have yet would produce a meaningless number.
What to watch for as you add integrations: every third-party tool, plugin, or MCP server an agent can call becomes part of your supply chain. When the first one lands, the questions that matter are — who built it, what can it do with your data, and can you revoke it in minutes. That's the day this diagnostic becomes about you.
ATTEST/LOG (free) may be more useful right now — it records what your own agents are authorized to do: open ATTEST/LOG →
Full Remediation Report — $79
Field-by-field breakdown, prioritized fix order, and a board-ready one-pager you can hand to your CISO or client. Delivered instantly.
Get the report →