Security and design, in one test.
Sunflower Consulting is a two-person firm based in Trondheim. One of us tests AI systems the way an attacker would; the other looks at them from a product, conversation-design and user-experience point of view.
Børge Pahlm
Co-founder, Security
Penetration tester, formerly at DNV. Leads the testing, and maps findings to the rules they may bear on.
Alina Jafri
Co-founder, Design
Product designer who has designed assistants for government services. Looks at every system from its users’ side: how the conversation is designed, where it refuses or hands over, and how it feels to use.
We work the same way every time, from scope to retest.
Scope and system review
We agree what to test and map how the system is built: what it reads, which tools it can use and what it can reach.
Testing
We try to lead the system astray the way an attacker would, and use it the way its users do.
Report
Every finding on its own page, by severity, with how to reproduce it and its remediation.
Retest
When your team has made its changes, we run the same tests again and tell you what now holds.