Who it is for
A business with a specific external exposure question and an owner or IT provider who can identify the affected resources and available records. This is a scheduled assessment, not an emergency-response service. Remote business-hours work.
Scope
One organization, one primary domain, up to five named hosts, one cloud or SaaS tenant and up to five agreed log sources. The historical review covers up to 30 days where evidence is retained. Evidence-volume ceilings, filters, formats and authorized methods are agreed in writing before acceptance. The 30 days is the review window, not an automatic evidence-deletion deadline.
What you receive
An exposure inventory; an evidence manifest; an access timeline and affected resources where the evidence supports them; findings with confidence, coverage limits and missing evidence; prioritized next steps; a 45-minute readout; and one factual-correction round requested within five business days.
How conclusions are reported
We distinguish supported access, attempted or blocked requests, no evidence found within the reviewed coverage, and indeterminate results. We assess claimed AI or bot identity separately. A bot name, IP address or successful HTTP status alone does not prove unauthorized retrieval or AI involvement. Missing logs and an inconclusive result do not prove that no access occurred. Public crawling does not establish internal compromise or model training.
Timing and access
Target delivery is 5–10 business days after written scope, required authority and agreed inputs are in place, with commercial start conditions confirmed for the engagement. Collection is read-only within the approved scope. Any reachability check needs its own written target, method and limits. Evidence transfer, storage, access and retention are agreed before collection. No client evidence is submitted to public AI services or online scanners.
Clear boundaries
No exploit testing, credential attacks, malware analysis, disk imaging, full-network investigation, unavailable-log reconstruction, custom parsers, incident recovery or continuous monitoring. No security/compliance certification, complete detection, actor-attribution guarantee or court-admissibility guarantee. Specialist investigation is accepted only when demonstrated delivery capability or a qualified partner is confirmed.
Next step
Discuss the scope of an exposure review. Email begin@deepwelllabs.com with subject External AI & Bot Exposure Audit. Describe the concern and relevant systems without sending evidence or credentials. If compromise may be active, contact your IT or incident-response provider promptly rather than waiting for this scheduled assessment.
Email begin@deepwelllabs.comOptional hardening
The Infrastructure Hardening Sprint is separately approved at $1,950. Audit and sprint total $4,900, with no bundle discount. The $750 guided diagnostic is optional, not a prerequisite and not automatically credited. Onsite work, travel, licenses, hardware and specialist fees require separate scope and pricing.