Runtime monitoring for an AI agent estate
Agent-action logging and SOC-integrated detection for an AI-forward financial services provider running production AI agents. Anonymised; metrics indicative.
AI assurance evidence for a global fintech
How a global fintech built a standing AI assurance map that survived an internal audit without an evidence scramble. Anonymised; metrics indicative.
AI guardrails for a payments business
How Salvador Cloud designed and red-teamed layered AI guardrails for a regulated digital payments business. Anonymised case; metrics indicative.
An AI gateway control plane for a UK SaaS
An AI gateway control plane for a mid-market UK SaaS, bringing every LLM call under consistent policy in eight weeks. Anonymised; metrics indicative.
vCISO AI governance for a consultancy
A vCISO governance model that let a global engineering consultancy answer board AI risk questions from standing artefacts. Anonymised; metrics indicative.
AI security guardrails for a global fintech
AI guardrails for a global fintech production agent: scoping controls, faster triage, and board-ready reporting. Anonymised case; metrics verified under NDA.
Securing a service copilot for retail
Layered AI guardrails for a UK e-commerce platform's service copilot: zero PII leakage in 6 months. Anonymised case; metrics indicative.
Resilience for a regulated UK utility
A regulated UK utility closed 23 ICT third-party resilience gaps and built an AI-aware incident playbook before audit. Anonymised; metrics indicative.
AI data protection for an edutech operator
Redesigned data-protection controls and gated DPIAs into the AI approval lifecycle for an international edutech operator. Anonymised; metrics indicative.
Securing MCP pipelines for an ad group
Hardened the MCP connector estate of a global advertising group, cutting exposed data egress paths from 40 to 4. Anonymised; metrics indicative.
Model poisoning defence for analytics
Detecting and quarantining poisoned training data in a big-data analytics pipeline before model deployment. Anonymised case; metrics indicative.
Cloud security architecture for an APAC crypto custody provider
How we designed the cloud security architecture and landing zone for an APAC crypto custody provider operating under HKMA / SFC oversight.
PCI DSS v4 readiness for a UK consumer finance platform
How we redesigned a UK consumer finance platform's card data flows to reduce PCI DSS v4 scope, then led the readiness programme.
ISO 27001 for a UK energy market operator
How we scoped, designed, and led the ISO 27001 certification programme for a UK energy market operator regulated by Ofgem and the BEIS Code of Conduct.