Jailbreak
Role-play, obfuscation, and multi-turn escalation attempts to bypass your system prompt.
Independent AI assurance
Break your AI
Break your AI
before anyone else does.
A jailbreak, a poisoned document, a coaxed tool call: your AI meets each one before a hostile user brings it, and you hold a signed record of how it answered. Your auditor can read that record without taking your word for it, or ours.
First scan free, a probe plan within two business days
The battery
Eleven ways your AI can fail. Tested on every scan.
PRB-01
PRB-02
Prompt injection
Hostile instructions smuggled through user content, documents, and tool outputs.
PRB-03
PII exfiltration
Attempts to extract personal data your system holds or has seen.
PRB-04
Bias
Differential treatment across protected characteristics in identical scenarios.
PRB-05
Hallucination
Confident fabrication under pressure: citations, numbers, people, precedent.
PRB-06
Toxicity
Harmful output under provocation, adversarial phrasing, and persona pressure.
PRB-07
Refusal drift
Whether your guardrails are the same today as the day you shipped them.
PRB-08
Data governance
Leakage of system prompts, internal tools, and configuration through the front door.
PRB-09
Tool misuse
Coaxing your agent into calling the wrong tool, with the wrong arguments, on someone else's behalf.
PRB-10
RAG exfiltration
Pulling retrieval-indexed documents out through the answers they ground.
PRB-11 · agentic
Excessive agency
Whether your agent stays inside its mandate when an attacker tries to widen it.
Enforcement
Know what enforces when.
The 2026 Digital Omnibus moved the EU AI Act's high-risk deadlines, so an "August 2026 high-risk deadline" is a date that no longer exists. Here is the schedule as amended, with the date each obligation reaches you.
Aug 2, 2025
GPAI rules applied
Obligations for general-purpose AI model providers took effect.
Aug 2, 2026enforcing
GPAI fines · Article 50 · Article 4
The AI Office's enforcement powers activate: fines up to 3% of global turnover or €15M for GPAI providers. Article 50 transparency — chatbot disclosure, deepfake labeling — and Article 4 AI literacy enforce. Only Article 50(2) machine-readable marking of synthetic content slipped, to Dec 2, 2026.
Dec 2, 2027
Annex III high-risk obligations
Stand-alone high-risk systems under Arts. 9–15, in hiring, credit, education, essential services and biometrics, postponed from 2026 by the Digital Omnibus. Every month of behavioral evidence you sign before then is a month your conformity file can show.
Aug 2, 2028
Annex I embedded high-risk
High-risk obligations for AI embedded in regulated products — machinery, medical devices, vehicles.
The vault
Evidence your auditor can verify without trusting us.
Every probe result is hashed into a chain for that system and signed. Change one record and the chain breaks, and anyone who checks can see exactly where.
scan 0141sha256:9f2c…a41e✓ ed25519 signed
scan 0142sha256:1b7d…03f9 ← 9f2c…a41e✓ ed25519 signed
scan 0143sha256:c58a…7b12 ← 1b7d…03f9✓ ed25519 signed
Independent by Design
Probative has no stake in your model, your cloud or your security vendor. A judge that grades its own remediation isn't a judge.
Untested Means Untested
When no probe tests how a control behaves, Probative reports that control as untested and leaves the gap in plain view. It never maps a control it didn't test.
Mapped for Your Auditor
Findings roll up to the EU AI Act, NIST AI RMF, ISO 42001 and the Colorado AI Act. One scan, four evidence packs.
The difference
Documented is not tested.
Governance platforms inventory your AI and collect attestations. Eval libraries test what your own team thought to test. Neither hands your auditor evidence they can verify without trusting you.
| Capability | GRC / governance platforms | DIY eval libraries | Probative |
|---|---|---|---|
| Adversarial behavioral testing | Questionnaires & policies | If you build it | 11 attack classes, every scan |
| Independent judge | Self-attested | Grades its own homework | No stake in your stack |
| Tamper-evident evidence | Editable records | Logs & spreadsheets | sha256 chain, ed25519 signed |
| Framework mapping | Control checklists | Manual | EU AI Act · NIST · ISO 42001 · Colorado |
| Continuous re-verification | Annual review cycle | When someone remembers | Scheduled, signed, on repeat |
Pricing
Start free. Prove it monthly.
Spot Check
$0
one scan, on us
- Full 11-class probe battery
- Independent judge grading
- Snapshot evidence report
Pulse
$450
per month · annual by invoice
- Continuous scheduled scans
- Signed evidence chain
- All four framework mappings
- Scheduled re-verification
Assurance
$1,900
per month · annual by invoice
- Everything in Pulse
- Drift alerts between scans
- Audit-grade evidence packs
- Multi-system portfolio view
- Regulated-buyer questionnaire support
Step zero
Know which rules apply first.
Probative produces evidence against obligations you already know you have. If you don't yet know which of the EU AI Act, Colorado, Texas, Illinois, NYC or California regimes reach your systems, start with Obligent, our sibling tool. It tells you which obligations, from which rule, as of which date, cites the rule for each, and says needs analysis where a rule can't settle it. Obligent finds the obligation; Probative proves the behavior.
One thing to know before you click: Obligent is in invite-only beta, and all 35 rules in its corpus are still marked draft until qualified counsel signs each one off. That review is its launch gate, and it has not cleared it. Use it to frame the question you take to your counsel.
What Probative is not. Probative is behavioral evidence, not legal advice, and not a certification body. Evidence packs show what your AI did under attack, mapped to framework controls — your counsel and your auditor decide what it means. Probative is currently in private pilot; every claim on this page describes the shipped probe battery and evidence engine, not aspirations.
Your conformity file
starts with one scan.
Annex III obligations reach stand-alone high-risk systems on December 2, 2027. Every month of signed behavioral evidence you hold by then is a month your file can show, and the first scan is free. Ready to put your AI on trial?