Grant Technologies LLC

AI Security and Vulnerability Research

Find the weaknesses in your systems before someone else does.

Grant Technologies finds and reports the vulnerabilities attackers actually use, in AI-powered applications and web platforms alike: prompt injection, data leakage, agent misuse, and broken access control.

Start a conversation

Vulnerability research

Grant Technologies conducts independent security research through bug bounty and vulnerability disclosure programs, on platforms such as HackerOne. We look for real, exploitable weaknesses in live systems, with a focus on AI and LLM features and on access control flaws, and report them to the organizations that own those systems so they can be fixed.

All research follows each program's published scope and rules, and findings are disclosed only through the program's coordinated disclosure process.

Services

AI and LLM security assessments

Adversarial testing of chatbots, copilots, RAG applications, and AI agents against the OWASP Top 10 for LLM Applications and MITRE ATLAS: prompt injection, jailbreaks, sensitive data exposure, and unsafe tool use.

Application security testing

Hands-on testing of web applications and APIs, with a focus on authorization flaws such as insecure direct object references and broken access control.

Cybersecurity consulting

Practical security guidance for small and mid-sized businesses: risk assessments, security reviews of new tools and vendors, and safe AI adoption, including what data AI tools can reach and which controls to put in place first.

How an engagement works

  1. Scope. We agree in writing on what is tested, how, and when.
  2. Test. Manual adversarial testing, supported by automation where it adds coverage.
  3. Report. Each finding comes with severity, reproduction steps, and a concrete fix.
  4. Retest. Fixes are verified so you know the issue is actually closed.

All testing is performed only with written authorization from the system owner.

About

Grant Technologies LLC is a Charlotte, North Carolina security practice founded by AJ Grant, an AI security engineer specializing in adversarial testing of production AI systems. AJ holds the Certified AI Security Professional (CAISP) credential and leads the company's vulnerability research and client work.

Contact

For engagements, questions, or coordinated vulnerability disclosure, email contact@grant-technologies.com.

Based in Charlotte, NC. Working with clients across the United States.