Questions we get from CTOs, CISOs and boards.

Mythos Safe means a product has been tested against the capabilities that frontier AI models such as Claude Mythos demonstrated in 2026: finding and exploiting vulnerabilities autonomously, at scale, for a few dollars per run. A Mythos Safe product has plain-English security rules that are tested on every release.

MATT is a security practice by Mattersec Labs. It runs AI security audits and continuous assurance for software products, testing them against 1,200+ attack patterns the way AI-enabled attackers would, and fixing findings with the customer's own engineering team.

CTOs, CISOs and founders of public software products, especially those with self-serve signup, AI features or agents in production, and those answering SOC 2, ISO 27001 or enterprise vendor reviews.

A penetration test is typically one consultant for one week, once a year, producing a report. An AI security audit uses researchers plus the same models attackers use, produces merged fixes, and leaves behind rules that are re-tested on every release.

Read-only access to the public deployment and, where useful, the repository. No agents are installed and no customer data leaves the customer's environment.

One hour to a first answer, three weeks to merged fixes and written rules, then continuous assurance on every release if you choose it.

Identity and access, spend and resource abuse, data exposure, automation and fraud, availability, and AI-written and agentic code. Each traces to at least one public incident in 2026.

Yes. Every rule maps to the control it satisfies, and evidence is generated from live test results, which shortens audits and vendor questionnaires.

No. The first consultation is a paid one-hour session with a senior researcher, settled when you book. You leave with a straight read on your exposure and a scope.

MATT by Mattersec Labs is based in San Francisco, California, and works with customers remotely.