Testing and defence led by a published security researcher with six CVEs, including a CVSS 9.1 Mirai botnet kill-switch.
All security →SOC 2, ISO, CPCSC, and the Canadian privacy stack, run end to end with an independent auditor.
All frameworks →Original research, free tools, and plain-language guides on security and compliance, from a published security researcher.
Read the blog →AI security for Ottawa founders and operators. Prompt injection is OWASP LLM01:2025, the #1 risk in AI applications, and appeared in over 73% of production deployments assessed in 2025 audits. The EU AI Act conformity-assessment deadline for Annex III high-risk systems is December 2, 2027. We co-deliver AI security with a specialist offensive partner: traztech runs the threat modelling, our partner runs the adversarial testing.
Ottawa is federal-sector tech, defence, and a long-standing cybersecurity ecosystem. The buyers are different from Toronto: longer cycles, more compliance, and ITSG-33 / Protected B / OSFI on every checklist.
Public sector and FRFI work runs through Ottawa. We carry the cybersecurity vocabulary required to talk to TBS, CCCS, and OSFI staff, and to vendors selling into them.
Prompt injection is OWASP LLM01:2025, the #1 risk in AI applications, and appeared in over 73% of production deployments assessed in 2025 audits. The EU AI Act conformity-assessment deadline for Annex III high-risk systems is December 2, 2027. We co-deliver AI security with a specialist offensive partner: traztech runs the threat modelling, our partner runs the adversarial testing.
For the full service detail, see the AI / LLM Security page. For fixed-price productized engagements, see pricing.
Book a free 30-minute discovery call. We’ll tell you whether this engagement fits, what it would cost, and when we could start.
Book a call