ecfirst

AI Penetration Test Pre‑Scoping Questionnaire

One form for every tier. Your answers in Section B decide which tier fits, and the follow-up questions for that tier appear as you go. Answer what you can. "Not sure" is a fine answer, and your ecfirst contact can help with the rest.

Tier 0 ExpressSpot check of one AI app, one user type. 2–4 business days.
Tier 1 BronzeBaseline assessment of one AI app, one user type, full report. 1–2 weeks.
Tier 2 GoldOne AI app plus its retrieval layer, user/tenant isolation, poisoning, supply chain. 2–4 weeks.