Assurance · Control testing
Every control claims to catch something
Approval gates, monitoring rules, verifiers, review steps. Each one was built to catch a specific failure. Almost none have been tested against cases built to get past them.
The usual evidence that a control works is that it has not fired. That is also what a broken control looks like.
What we do
We build cases that should trip each control, run them, and report how many got through.
You get a detection rate, the specific cases that were missed, and the test set itself, so you can re-run it after every change.
How it runs
Read-only. We do not connect to your production systems and we do not need your customer data. Test cases are constructed, not sampled, so there is nothing sensitive to move and nothing we can break.
Why this exists
In July 2026 our own checks reported green while the path in front of a buyer was broken. We published the record in full, including what we did not measure.
Talk to us
Tell us one control and what it is supposed to catch. We will tell you whether testing it is worth the effort. Sometimes it is not.