The problem
You use or plan to deploy AI without controlling its risks, access or usage rules.
What we do
- AI risk assessment
- Security of agents, tools and permissions
- Prompt injection and disclosure testing, depending on the package
- Access control and data protection
- Usage rules and policies
- Alignment with ISO/IEC 42001 and other frameworks
Packages and pricing
What you get, at what price.
Advanced
$12,900
≈ 7 740 000 FCFA (indicative)
Target timeline : 30 to 45 business days
Choose this packageEnterprise
Custom quote
Multi-entity governance, critical system assessment, controls programme, extended technical reviews and specialised regulatory support.
Request a quoteCompare packages: what do I get?
| Included | Essential$1,490 | Business$4,900 | Advanced$12,900 |
|---|---|---|---|
| AI systems or use cases | Up to 2 | Up to 5 | Up to 10 |
| Usage inventory | Targeted | Structured | In-depth |
| AI risks | Main risks | Detailed analysis | In-depth analysis |
| Data flows | Declarative review | Targeted mapping | Detailed mapping |
| Permissions and access | Essential review | Structured review | In-depth review |
| Frameworks (ISO/IEC 42001, NIST AI RMF) | Targeted analysis | Targeted gap analysis | In-depth gap analysis |
| Technical review | Not included | Not included | Up to 2 AI applications |
| Logs and traceability | Recommendations | Targeted review | In-depth review |
| Deliverables | Report and remediation plan | Report, risk register, recommendations and roadmap | Detailed file, evidence, priorities and roadmap |
| Debrief | 45 min | 90 min | 2 h |
| Target timeline | 10 business days | 20 business days | 30 to 45 business days |
Why move up? Each higher level covers more volume, deeper analysis and more support, line by line in the table.
Enterprise — custom quote
Multi-entity governance, critical system assessment, controls programme, extended technical reviews and specialised regulatory support.
What's not included
- ISO/IEC 42001 certification and certification audit
- Full-scope penetration test
- 24/7 SOC monitoring
- Full technical remediation
- Guarantee of no vulnerabilities
Technical reviews are carried out only with written authorisation, within an approved scope, with documented rules of engagement and exclusions.
Start conditions and fees
- Timelines start once scope is approved, the required information and access are received, and the start conditions in the quote are met.
- Any request not included gets an estimate and prior approval.
- Third-party costs (APIs, cloud, licences, messaging) are separate from HACKTUALIZ fees.
- Intellectual property, usage rights, confidentiality, data, liability, payment and termination are set out in the contract.
Prices exclude taxes, in US dollars; applicable taxes are added. The FCFA amount is an indication at a fixed internal rate (600 FCFA per USD), not today's exchange rate: invoicing follows the signed quote. Timelines are targets.
Example use cases
- Before putting an AI agent into production
- AI usage policy for staff
- Review of an AI tool already in use
- AI Security Assessment
Our honest limits
- Alignment with a framework is not a certification.
- No security measure removes every risk: we reduce and document the risks identified.
- Traditional cybersecurity audits and penetration tests remain a separate expertise.
- Which package should I choose?
- Pick by volume: the table above shows what each package covers. If unsure, Essential lets you start small; an advisor can also guide you.
- Are API and hosting costs included?
- No. Third-party costs (AI APIs, cloud, licences, messaging) are billed separately by usage, apart from our fees.
- When do timelines start?
- Once scope is approved and the required information and access are received. They are target timelines, not guarantees.
- Who owns the data?
- Your data stays yours. Intellectual property, usage rights and confidentiality are set out in the contract.
- What if I need more?
- Anything outside the package is estimated and approved with you first. The Enterprise package covers wider needs.