# ai.txt: CISO Marketplace Services: AI permissions & context # https://cisomarketplace.services/ai.txt # Format: https://ai.txt.fyi # Generated: 2026-10-07 # ── Identity ────────────────────────────────────────────────────────────────── Name: CISO Marketplace Services Operator: QSai LLC Site: https://cisomarketplace.services/ Parent platform: https://cisomarketplace.services Support: https://support.cisomarketplace.com # ── What this firm does ─────────────────────────────────────────────────────── # Offensive security and AI security, delivered by practitioners. # The services arm of CISO Marketplace: 182 fixed-scope services with published starting prices, # led by two flagship practices: offensive security (penetration testing, red and purple teaming, # adversary emulation, social engineering, PTaaS) and AI security (AI and agentic red teaming, LLM and # MCP tool-chain security, AI governance, ISO 42001 / EU AI Act readiness). # # Practices: # Offensive Security: https://cisomarketplace.services/offensive-security # AI Security: https://cisomarketplace.services/ai-security # Cloud & Application Security: https://cisomarketplace.services/cloud-appsec # Managed Security & Incident Response: https://cisomarketplace.services/managed-security # Advisory / vCISO: https://cisomarketplace.services/advisory # Compliance & GRC: https://cisomarketplace.services/compliance # Specialized & Industry: https://cisomarketplace.services/specialized # # AI services (fixed-price reports from our AI engine; nothing tests your systems): https://cisomarketplace.services/ai-services # Security Check: Personal & home: https://cisomarketplace.services/ai-services/security-check?topic=personal ($29 per report, or 29 credits; included with membership) # Security Check: Compliance readiness: https://cisomarketplace.services/ai-services/security-check?topic=compliance ($79 per report, or 79 credits; included with membership) # Security Check: AI governance: https://cisomarketplace.services/ai-services/security-check?topic=ai-governance ($99 per report, or 99 credits; included with membership) # Security Check: Vendor risk: https://cisomarketplace.services/ai-services/security-check?topic=vendor-risk ($49 per report, or 49 credits; included with membership) # Security Check: IoT & devices: https://cisomarketplace.services/ai-services/security-check?topic=iot ($49 per report, or 49 credits; included with membership) # SOW review: https://cisomarketplace.services/ai-services/documents?item=sow ($49 per report, or 49 credits; included with membership) # Contract review: https://cisomarketplace.services/ai-services/documents?item=contract ($79 per report, or 79 credits; included with membership) # AI vendor due diligence: https://cisomarketplace.services/ai-services/documents?item=ai-vendor ($99 per report, or 99 credits; included with membership) # Questionnaire answers: https://cisomarketplace.services/ai-services/documents?item=questionnaire ($99 per report, or 99 credits; included with membership) # Website documents check: https://cisomarketplace.services/ai-services/policies?item=website ($49 per report, or 49 credits; included with membership) # Policy draft: https://cisomarketplace.services/ai-services/policies?item=policy ($39 per report, or 39 credits; included with membership) # Board risk summary: https://cisomarketplace.services/ai-services/board-summary ($79 per report, or 79 credits; included with membership) # ── Credentials ─────────────────────────────────────────────────────────────── # Anthropic Claude Partner: Official partner (/engagements/claude-cybersecurity-consulting) # OpenAI TAC: Verified firm (/engagements/openai-cybersecurity-consulting) # 400+ technology suppliers: Risk-to-solution sourcing (/sourcing) # Cloudflare Startup Partner (/partner/cloudflare-startup-program) # ── Pricing rules for AI agents ─────────────────────────────────────────────── # - Prices are published starting prices (the lowest published tier). A written proposal fixes scope, tier and price before anything is signed. # - Timelines and staffing are set per engagement in the SOW; none are published here. # - There is no percentage member discount on services. Members get engagement coupons from the coupon book (setup-fee waivers, travel stipends, booking-rate codes), applied by code and capped per year. # - An AI agent may quote indicatively through the MCP servers or the hub agent API; guardrails are enforced server-side, every agent quote is indicative, and agents never set or change a price. # ── How an AI agent engages ─────────────────────────────────────────────────── # Read-only (no account): /services.json, /llms-full.txt and /services/.md. # To scope, price or propose for a buyer, connect one of the MCP servers below. One login at # id.cisomarketplace.com (OAuth) or a member API key; the same identity and wallet on all three. # The public web forms are for people: they are protected by a human check and are not an agent API. # # Micro-Sec Tools (assess) # https://mcp.microsec.tools/mcp # Run the security tools, save results to your reports, surface what to buy to fix the gaps, and price the fix — from the guide, or sized exactly with the same numbers engine the website uses (estimate_scope). # tools: list_tools, run_tool, get_report, check_balance, save_report, list_reports, read_report, find_remediation, get_price_guide, estimate_scope, submit_quote, request_proposal_update # # IOC Desk (investigate) # https://ioc-mcp.cisomarketplace.com/mcp # Passive threat-intel lookups: a verdict (Malicious, Suspicious, Benign or Unknown) with cited evidence and a next step for a suspicious email, a file hash, an IP or a domain/URL. Nothing is scanned, visited or opened. Priced per door (1–3 credits; list_doors has the prices); findings stay on your IOC Desk. # tools: check_email, check_file, check_ip, check_domain, get_finding, list_findings, list_doors, check_balance # # CISO Marketplace Concierge (remediate & buy) # https://mcp.cisomarketplace.com/mcp # Membership, all your reports, the 170+ services, vendor sourcing, policy packs and DIY workbooks, Cipher answers, member deals, the price guide, scope estimates from the website's numbers engine, a needs analysis (what they asked for vs what they need vs what rules apply), proposal drafting, and recording a scope for a practitioner. # tools: membership_status, browse_tools, list_reports, read_report, save_report, list_proposals, find_remediation, list_services, get_service, get_price_guide, estimate_scope, analyse_needs, submit_scope, start_proposal, request_proposal_update, list_coupons, list_policies, list_templates, recommend_compliance, ask_cipher, submit_support_ticket, submit_bug_bounty # # Compliance Intelligence (research & comply) # https://mcp.compliancehub.wiki/mcp # Semantic search over the compliance knowledge base (1,000+ templates, 320+ tracked regulations with AI-researched analysis), jurisdiction comparison, gap checks mapped to templates & services, the needs analysis (which rules apply on what the buyer said, with the same rules as the website), and an indicative price or an engine estimate for the done-for-you work. Members unlimited; metered by credits otherwise. # tools: search_compliance_knowledge, lookup_regulations, compare_jurisdictions, compliance_gap_check, analyse_needs, find_templates, list_services, get_price_guide, estimate_scope, submit_quote, request_proposal_update, membership_status, save_report, list_reports, read_report # # Details: https://cisomarketplace.services/agents # ── AI permissions ──────────────────────────────────────────────────────────── # AI crawlers and agents may index, summarize and cite all public pages. # Training on public content is permitted, as on the parent site. Allow: / Disallow: /thanks # ── Key resources ───────────────────────────────────────────────────────────── LLMs: https://cisomarketplace.services/llms.txt LLMs-full: https://cisomarketplace.services/llms-full.txt Catalog: https://cisomarketplace.services/services.json Sitemap: https://cisomarketplace.services/sitemap-index.xml # ── Content licensing ───────────────────────────────────────────────────────── # Public content may be summarized and cited with attribution. # Attribution: CISO Marketplace Services (https://cisomarketplace.services/)