self.md business
Security verification packages for skills, bots, and agent setups
We review high-risk surfaces first: prompt injection payloads, credential access paths, hidden execution instructions, and network exfiltration behavior.
Package Overview
| Package | Price | Best for | Delivery SLA |
|---|---|---|---|
| Quick Scan | $299 | Single repository or skill package | 3 business days |
| Standard Audit | $1,200 | Production tool with external users | 7 business days |
| Continuous Verification | $399/mo | Teams shipping frequent updates | Initial baseline in 7 business days, then rolling re-checks |
Quick Scan
$299
Fast triage for one repo, one skill package, or one bot integration.
Scope
- Static scan for hidden instructions and payload markers
- Credential access pattern review (
.env, cloud keys, git tokens) - Basic exfiltration path check for outbound network calls
SLA
- Start within 1 business day
- Final report in 3 business days
Proof Points
- Risk scorecard (critical/high/medium findings)
- Annotated finding log with exact file/line references
- Go/No-Go recommendation for publishing
Standard Audit
$1,200
Deep audit for products already serving users or customers.
Scope
- Everything in Quick Scan
- Manual line-by-line review of prompt and tool instructions
- Sandbox execution run to validate real runtime behavior
- Remediation guidance for each critical and high finding
SLA
- Kickoff call scheduled within 2 business days
- Delivery in 7 business days
- One follow-up Q&A session included
Proof Points
- Formal audit report (scope, methodology, findings, actions)
- Executive summary for founders/leadership
- Optional public verification mention after fixes are applied
Continuous Verification
$399/mo
Ongoing trust layer for teams that ship weekly or daily changes.
Scope
- Initial baseline audit (Standard Audit depth)
- Monthly re-verification after major changes
- Diff-based re-checks for newly introduced attack surface
- Priority support for incident-level questions
SLA
- Baseline audit in first 7 business days
- Monthly re-audit report within 3 business days of review start
- Critical issue notice within 1 business day
Proof Points
- Monthly verification log and changelog coverage
- Trend view: recurring classes of vulnerabilities over time
- Badge maintenance support tied to active coverage
What You Receive
- Audit artifacts you can hand to technical and business stakeholders.
- Concrete remediation actions, not just generic warnings.
- A decision-ready view of whether your skill or bot is safe to distribute.
Need Enterprise Scope?
If you operate multiple repositories, multiple teams, or regulated workloads, request a custom enterprise package.
Disclosure Boundary
Verification and sponsorship are separate products with separate decisions and labels. Read policy: Verified vs Sponsored Disclosure Policy .