Home / Design Partner Program

Design Partner Program — 5 free slots. Shape the product and get your AI red-teamed.

For mid-market healthcare AI vendors and health systems, and for law-enforcement agencies, deploying AI on sensitive data. A full adversarial test of your live, authorized AI system, evidence your compliance team can use, and a direct line to the people building RedLens. Free for a 60 to 90 day term.

5 slots. First come, first scoped.
Apply for a slot Book a call
The offer

What you get, and what we ask

What you get

A real red-team, with evidence you can hand to compliance

  • A full red-team of your live, authorized AI: prompt injection, jailbreaks, data exfiltration, tool and agent abuse, and containment escapes, run against the system you actually deploy, under rules of engagement we agree first.
  • Citation-level evidence for every confirmed finding, mapped to HIPAA, CJIS, the NIST AI RMF, the OWASP LLM Top 10 and MITRE ATLAS: what was sent, what came back, which control it touches.
  • Founder access and roadmap influence: you talk to the people building the product, and what you need shapes what gets built next.
  • Priority support for the whole term.
  • Locked-in founder pricing if you continue after the term. No obligation to.
  • Free for the term. No card, no invoice.
What we ask

Candour, authorization, and a story we can tell

  • Honest feedback on a recurring call: what worked, what did not, what you would need before you would pay for it.
  • Written authorization and agreed rules of engagement before any testing starts: which systems, which hours, what is out of bounds, who to call.
  • Permission to name you as a design partner with a quote or a short case study once there is a result worth sharing. Your logo appears only with your explicit OK; nothing is published without your review.

Term: 60 to 90 days, scoped together on the first call.

Who this is for

Teams putting AI in front of sensitive data

Healthcare AI vendors

Mid-market, shipping to providers

Clinical assistants, documentation copilots, patient-facing agents. You are answering HIPAA questionnaires and want evidence, not assurances, behind your answers.

Health systems

Deploying or buying AI

You are standing up AI on PHI, or evaluating a vendor's, and need to know what an attacker can make it do before a patient or a regulator finds out.

Law enforcement

Agencies deploying AI on CJI

Report writing, records search, investigative assistants touching criminal justice information under CJIS. You need the test done by people who have read the policy.

Apply

Five fields. We reply within two working days.

Or skip the form and book a 30-minute call directly.

Book a call instead

We use these details to review your application and reply, nothing else. No testing happens until you have signed a written authorization and we have agreed rules of engagement. See our Privacy Policy.

Plain statements, so nobody is surprised later

  • RedLens evidence supports your HIPAA, CJIS, NIST AI RMF, OWASP LLM and MITRE ATLAS work by documenting what was tested and found. It does not certify compliance with any of them.
  • This engagement is a red-team assessment: we find and prove exploitable weaknesses with evidence, and help you prioritise them. Remediation is your team's work. (Inline runtime enforcement — Runtime Guard — is a separate capability, in preview.)
  • RedLens has no SOC 2 report yet. Our own security posture is described on the Security page, and we will answer your questionnaire honestly.
  • Testing happens only against systems you own or are authorized to test, inside the rules of engagement we agree in writing.