YLB Security is a platform for AI security assessment, compliance governance and offensive security tooling. Test your LLMs and MCP servers, classify under the EU AI Act, scan for brand impersonation and track vulnerabilities — all in one place.
We live in the same intelligence ecosystem
Four purpose-built tools for AI security assessment, regulatory compliance, brand protection and vulnerability intelligence.
Automated OWASP LLM Top 10 testing for your chat endpoints and MCP server auditing — prompt injection, data exfil, tool abuse and more.
Learn moreEU AI Act classification, ISO 42001 control tracking and risk assessments with audit-ready reports — compliance for teams shipping AI.
Learn moreBranguard, ThreatLens and SentriX — offensive tools we built to hunt impostor domains, track vendor advisories and probe LLM & MCP security.
See the toolsFour tools that automate AI security testing, compliance governance and offensive security so your team focuses on the decisions that matter.
Find every domain that looks like yours before a phishing campaign does. Branguard enumerates hundreds of look-alike domains in one sweep, live-tests each one, and captures screenshots so you can compare an impostor page against your real site side-by-side.
One place for the vulnerability information your stack actually runs on. ThreatLens aggregates advisories from NVD, Ubuntu, Red Hat, Microsoft, OSV and more, filters them by the tech you bookmarked, and pushes what matters straight to your Slack channel.
send_http1_request exposed — SSRF to cloud metadata confirmed
Automated security assessment for LLM applications and MCP servers. SentriX runs the full OWASP LLM Top 10 attack suite against your chat endpoint and audits MCP servers for tool exposure, prompt injection via tools, auth gaps, data exfiltration and resource abuse — delivering scored reports with evidence and remediation.
Compliance for your AI systems, built for the EU AI Act and ISO/IEC 42001. Inventory every model you ship, classify it against Art. 5 / Art. 6 / Annex III triggers with a stored rationale, run weighted risk assessments with auto-generated mitigations, and track 22 controls — then export one audit-ready report.
Create an account and you're the instance owner — every tool is ready to use immediately.
Point SentriX at an LLM endpoint, sweep domains with Branguard, or classify an AI system in AegisGRC.
Scored results with evidence and remediation — download as self-contained HTML reports you can share.
Set up watchlists, bookmarks and alerts for continuous brand, vulnerability and compliance monitoring.
Create a free account and start running assessments in minutes. No setup calls, no contracts — just tools that work.