Polished org card
Browse files
README.md
CHANGED
|
@@ -7,25 +7,83 @@ sdk: static
|
|
| 7 |
pinned: false
|
| 8 |
---
|
| 9 |
|
|
|
|
|
|
|
| 10 |
# Aligned Super Intelligence
|
| 11 |
|
| 12 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 13 |
|
| 14 |
-
|
| 15 |
|
| 16 |
-
|
| 17 |
|
| 18 |
-
|
| 19 |
-
- **White-glove engagements**: our human operators and Aligned-1 attempt to break into your in-scope AI system under contract, followed by a findings report and remediation workshop.
|
| 20 |
|
| 21 |
-
|
|
|
|
|
|
|
|
|
|
| 22 |
|
| 23 |
-
|
| 24 |
-
- No published scores until our pre-registered evaluation is complete.
|
| 25 |
-
- Findings are reproducible, evidenced, and paired with fixes.
|
| 26 |
|
| 27 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
| 28 |
|
| 29 |
-
|
| 30 |
-
- Government and engagements: leadership@alignedsafely.com
|
| 31 |
-
- Web: [alignedsafely.com](https://alignedsafely.com)
|
|
|
|
| 7 |
pinned: false
|
| 8 |
---
|
| 9 |
|
| 10 |
+
<div align="center">
|
| 11 |
+
|
| 12 |
# Aligned Super Intelligence
|
| 13 |
|
| 14 |
+
### Offensive security for frontier AI systems
|
| 15 |
+
|
| 16 |
+
*We break AI systems before adversaries do, for the governments and institutions that can't afford to be second.*
|
| 17 |
+
|
| 18 |
+
[**Website**](https://alignedsafely.com) · [**Aligned-1**](https://huggingface.co/alignedsi/Aligned-1) · [**Engagements**](mailto:leadership@alignedsafely.com?subject=White-glove%20engagement)
|
| 19 |
+
|
| 20 |
+
</div>
|
| 21 |
+
|
| 22 |
+
---
|
| 23 |
+
|
| 24 |
+
## Who we are
|
| 25 |
+
|
| 26 |
+
Aligned Super Intelligence is an AI security lab. We are a team of hackers and researchers with industry security experience. We bring offensive security discipline to a new attack surface: large language models, retrieval pipelines, and autonomous agents that can read, write, and act.
|
| 27 |
+
|
| 28 |
+
As AI systems take on real authority, such as running tools, moving data, and making decisions, the cost of a single exploitable behavior goes up. Our job is to find those behaviors first, prove them with evidence, and help you close them.
|
| 29 |
+
|
| 30 |
+
## Who we work with
|
| 31 |
+
|
| 32 |
+
| Sector | Typical concern |
|
| 33 |
+
|---|---|
|
| 34 |
+
| **Government & public sector** | AI deployed in citizen-facing and internal decision systems |
|
| 35 |
+
| **Defense & national security** | Adversarial manipulation of models in sensitive workflows |
|
| 36 |
+
| **Critical infrastructure** | Agents with operational access to systems and data |
|
| 37 |
+
| **Frontier AI labs** | Pre-release red-teaming of models and agent scaffolds |
|
| 38 |
+
| **Enterprise security teams** | Copilots, RAG assistants, and internal agents touching sensitive data |
|
| 39 |
+
|
| 40 |
+
## What we test
|
| 41 |
+
|
| 42 |
+
- **Prompt injection.** Direct and indirect: hostile instructions hidden in documents, web pages, email, and tool output.
|
| 43 |
+
- **Jailbreaks & policy bypass.** Getting a system to do what its operators explicitly forbade.
|
| 44 |
+
- **Data exfiltration.** Leaking system prompts, credentials, retrieved documents, or user data.
|
| 45 |
+
- **Tool & agent abuse.** Turning an agent's permissions against its owner: unsafe actions, privilege escalation, scope escape.
|
| 46 |
+
- **Retrieval poisoning.** Corrupting what a RAG system believes to be true.
|
| 47 |
+
- **Multi-step attack chains.** Combining small weaknesses into a full compromise, the way real attackers do.
|
| 48 |
+
|
| 49 |
+
Findings are mapped to the **OWASP Top 10 for LLM Applications** and rated with **CVSS v4.0**.
|
| 50 |
+
|
| 51 |
+
## How we work
|
| 52 |
+
|
| 53 |
+
1. **Scope & authorization.** Signed rules of engagement define exactly what is in bounds. Nothing outside them is touched.
|
| 54 |
+
2. **Reconnaissance.** We map your models, prompts, tools, data flows, and trust boundaries.
|
| 55 |
+
3. **Attack.** Human operators and Aligned-1 work together: the model for breadth and speed, the humans for creativity and judgment.
|
| 56 |
+
4. **Evidence.** Every finding is reproducible, with exact inputs, observed behavior, and impact.
|
| 57 |
+
5. **Report & remediation.** A prioritized findings report, followed by a working session with your engineers to fix what we found.
|
| 58 |
+
6. **Retest.** We verify the fixes hold.
|
| 59 |
+
|
| 60 |
+
## Aligned-1
|
| 61 |
+
|
| 62 |
+
**[Aligned-1](https://huggingface.co/alignedsi/Aligned-1)** is our AI security assessment model, built to carry out authorized penetration testing of AI systems and to write findings reports that engineers can act on.
|
| 63 |
+
|
| 64 |
+
- Access is **gated** and every request is **reviewed by hand**.
|
| 65 |
+
- It is released only to vetted organizations testing systems they own or are authorized to test.
|
| 66 |
+
- Fine-tuned weights are **not yet public**. We publish **no benchmark scores** until our pre-registered evaluation is complete and reviewed.
|
| 67 |
+
|
| 68 |
+
## White-glove engagements
|
| 69 |
|
| 70 |
+
For organizations that need the strongest assurance available: our team plus Aligned-1, attempting a real break-in against your in-scope AI systems under contract. Fixed scope, written rules of engagement, a full findings report, and a remediation workshop. Priced for institutional buyers.
|
| 71 |
|
| 72 |
+
📩 **leadership@alignedsafely.com**, subject line `White-glove engagement`
|
| 73 |
|
| 74 |
+
## Our principles
|
|
|
|
| 75 |
|
| 76 |
+
- **Authorized targets only.** Every test runs under written permission, every time.
|
| 77 |
+
- **Evidence over claims.** No inflated numbers. If we can't reproduce it, we don't report it.
|
| 78 |
+
- **Defense in depth.** Model behavior alone is never the safety boundary. Scope is enforced at the tool layer, with human review.
|
| 79 |
+
- **Responsible release.** Offensive capability is gated, logged, and revocable.
|
| 80 |
|
| 81 |
+
## Contact
|
|
|
|
|
|
|
| 82 |
|
| 83 |
+
| | |
|
| 84 |
+
|---|---|
|
| 85 |
+
| Access & product | jp@alignedsafely.com |
|
| 86 |
+
| Government & engagements | leadership@alignedsafely.com |
|
| 87 |
+
| Web | [alignedsafely.com](https://alignedsafely.com) |
|
| 88 |
|
| 89 |
+
<sub>Unauthorized access to computer systems is illegal. Aligned Super Intelligence tools and services are provided only for authorized security testing.</sub>
|
|
|
|
|
|