AI Security Assessment

Your team is sharing data with AI right now. Do you know which data?

Most SMB owners find out the hard way. Get your free risk score in 5 minutes β€” before a client does.

Get My Free Risk Score β†’
67%
of companies have no AI usage policy
$670K
average cost of shadow AI breach
5 min
to complete
thorngrade.com/dashboard

Overall Risk Score

73/100
HIGH RISK
73

Domain Scores

Data Protection
45F
Access Controls
62D
AI Governance
28F
Vendor Risk
71C
Employee Training
55D

Top Vulnerabilities

CRITICALNo AI usage policy documented
HIGHChatGPT used with client data
HIGHNo offboarding for AI tools

Sound familiar?

Every week we talk to business owners who had no idea this was happening β€” until it was too late.

πŸ‘οΈ

Your employees are pasting client proposals into ChatGPT. You have no idea.

It happens every day. No malice β€” just convenience. But that data now lives on someone else's servers.

πŸ”Ž

You have 14 AI tools connected to your company β€” you approved 3 of them

The other 11 were installed by employees who thought they were being helpful. Each one is a door you didn't open.

πŸ“‹

A big client asks: 'How do you protect our data?' You freeze.

That question is coming. Companies that can answer it win deals. Companies that can't, lose them.

πŸ”‘

Your intern connected an AI tool that owns everything you paste into it

Many AI tools claim broad IP rights over input. You may have already handed over confidential client work.

πŸšͺ

Someone quit last month. Their AI tool access was never revoked.

They can still access the AI apps they connected β€” including everything those apps can see in your Google Workspace.

πŸ›‘οΈ

31 Google Drive files with client financials are set to 'anyone with the link'

You set those permissions months ago and forgot. A risk scan finds them in 60 seconds.

How It Works

No IT department needed. No technical setup. Just answers.

1
πŸ“

Answer 15 Questions

About your team's AI usage. No jargon. No IT required. Takes 5 minutes from your phone.

2
πŸ“Š

Get Your Score

Instant results. See exactly what's exposed, what's at risk, and how you compare to similar businesses.

3
βœ…

Know What to Fix First

A prioritized list of what to do β€” not a 40-page report no one reads. Simple. Specific. Actionable.

Which one is you?

Two products. Pick the one that fits where you are right now.

πŸ›‘οΈ

ThornGrade Shield

Your team uses AI tools β€” ChatGPT, Copilot, Notion AI, Grammarly. You want to know what they're sharing, who has access, and how to protect client data.

β†’ Free scan. Results in 5 minutes.

Start Free Shield Scan β†’
πŸ€–

ThornGrade Sentinel

You're building or deploying AI agents β€” bots, automations, workflows that act on your behalf. You need to audit what they can access, what they're doing, and whether they can go rogue.

β†’ For technical founders and dev teams.

Explore Sentinel β†’
Coming Soon
πŸ”

Code Security Scanning

AI-powered vulnerability detection for your codebase. Same engine as Claude Code Security, built for non-technical teams.

β†’ Plain-English security reports.

β€œBuilt by security engineers who've audited what happens when AI goes wrong.”

No VC backing. No compliance theater. Just tools that work.

2,400+ risk assessments completed
β€œEvery company using AI tools needs to know their risk score. Most don't.”
πŸ”’Read-only access
🚫Zero data storage
βœ…SOC 2 methodology
⚑Results in 5 minutes

The Questions You're Actually Asking

We hear these every week from SMB owners. Here's the honest answer.

β€œCan someone steal my client data through our AI tools?”

Yes β€” and it's more common than you think. AI tools with Google Workspace permissions can read your emails, files, and contacts. ThornGrade maps every integration and shows you exactly what each tool can see.

β€œAre my employees being safe with AI access?”

Probably not intentionally unsafe β€” but uninformed. Most employees don't realize ChatGPT stores their conversations or that some AI tools claim ownership of what you paste in. ThornGrade shows you who's using what.

β€œCan I prove to my clients their information is secure?”

Yes. Your ThornGrade report is shareable proof β€” a monthly scan with a real score. "We got a 91/100 in our last assessment" is a much better answer than "we take security seriously."

β€œDo I need to be technical to use this?”

Not at all. ThornGrade is built for business owners, not IT departments. If you can fill out a form, you can complete the assessment. No software to install. No engineer required.

Here's what the first 3 months look like

This is the story we hear from customers over and over.

Month 1

"Oh sh*t, I had no idea."

Free scan. Score: 52/100. You discover: 14 AI tools connected to your Google Workspace you never approved. 3 employees regularly sharing client files with ChatGPT. 31 Drive files set to "anyone with the link." No AI usage policy. You buy Shield Pro ($199) for the full fix-it report. You spend a week cleaning up. Score jumps to 78.

Month 2

"Wait, it happened AGAIN?"

Shield Monitor ($149/mo) re-scans automatically. A new hire connected 2 AI tools on their first day. Someone shared a new client deck publicly. Score dropped from 78 to 71. You get an email: "2 new issues. Score: 71 (↓7)." You fix it in 10 minutes.

Month 3+

"I can prove we're safe."

Your biggest client asks: "How do you protect our data?" You send them your ThornGrade report. Monthly scan. 89/100. "We monitor our AI security continuously." That answer β€” backed by a real score β€” wins deals. $149/mo is not what you're paying for a scan. It's what you pay for ongoing proof that your company is safe.

$199
Shield Pro β€” one-time full report
280Γ—
Return on investment vs. avg. breach cost
$670K
Average cost of a data breach for SMBs

Less than a team lunch per month to protect your entire company β€” and to prove you're protected.

Your team is sharing data with AI right now.
Find out what β€” before your client does.

Free scan. 5 minutes. No IT department needed.

Free to start. No credit card required.