FILE 00Z-2027 / AI EXPOSURE SYNTHETIC DEMONSTRATION NO TRACKERS 4 MIN READ

One email can turn your AI assistant into the leak.

Your team gave an assistant access to email, files, and payments. One line of text inside a routine document can redirect it. This file shows you where the doors are — and what to ask for next.

Check your exposure

A self-assessment, not a sales quiz. Results are visible without an email address.

INBOX SYNTHETIC · 14:02
From
Northwind Supply <billing@northwind-supply.example>
To
accounts@meridian.example
Subject
Invoice 44821 — corrected bank details

Hi — the bank details on the last invoice were wrong. The corrected remittance is attached. Can you confirm you have it?

Thanks,
M. Alvarez

ASSISTANT scope: mail · drive · payments
  1. No actions yet. The assistant is connected and waiting.
FIG. 1 Indirect prompt injection via a supplier invoice SYNTHETIC

Your AI has twelve doors.
Most teams guard one.

EXHIBIT 02 · 12 ENTRIES · 0 REVIEWED

Every place text enters the system is a place instructions can enter with it. The chat box is the obvious one. The invoice, the CV, the web page it summarizes, the ticket a tool returns — those are the ones that get through.

Select a door to read its file, then tick it as reviewed. Four ticks marks the register reviewed.

12 doors in view

    01 PRODUCT

    The chat box

    What it touches
    What goes wrong
    Business impact
    The control
    Ask your team

      Select an entry in the register.

      Can you spot the line that hijacks the assistant?

      EXHIBIT 03 · 3 ITEMS · NO EXPLOITS

      In each exhibit, ordinary text is doing the work of a command. The instruction is written for the machine, not for you. Find it before the assistant does.

      Concept only. Nothing here would compromise a real system; the patterns are what matter.

      FOUND 0 / 3
        EXHIBIT A SUPPLIER INVOICE

          EXHIBIT 1 / 3

          Seven questions your board will ask anyway.

          EXHIBIT 04 · 7 QUESTIONS · 3 MINUTES

          Answer what is true today, not what you intend. The result is a working read on exposure — not a certification, and not a security test.

          QUESTION 1 OF 7 0%

          Nothing is sent anywhere. Answers stay in this browser until you clear them.

          Q1 / 07

          Where is AI already in use in your business?

          Choose the closest answer

          The document you forward, not the pitch you delete.

          EXHIBIT 05 · ONE PAGE · PRINTABLE

          NOTCOM ØØZ.CO
          BOARD USE
          REF 00Z/2027/EXP-000 18 OCTOBER 2027

          AI exposure memorandum

          To
          The Board — your company
          From
          Office of the CISO (draft for review)
          Subject
          AI exposure: score 0 of 21, three gaps to close

          Complete the exposure check and this page becomes a one-page memo. The score, the three gaps that matter, and five questions for the next board meeting. Nothing is filled in from assumptions.

          • 01FindingThe band, the score, and what it does and does not prove.
          • 02Three gapsRanked from your answers, each with the ask and the standard it maps to.
          • 03Five questionsWhat the board should put to the CISO in the next meeting.
          • 04Next stepA scoped request: reproduction, fix, retest.
          • 05Scope of this documentSelf-assessment, not an audit, a certification, or legal advice.
          00z.co 00Z/2027/EXP-000 Page 1 of 1

          A self-assessment generated from seven answers in your browser. It is not an audit, a certification, or legal advice. If you ask us to email it, the PDF is typeset once on our server and the address is not stored.

          The question is no longer whether to govern AI. It is whether you can prove you did.

          EXHIBIT 06 · CROSSWALK · ORIENTATION

            Mapped at family level to OWASP LLM Top 10 (2025), MITRE ATLAS tactics, and the NIST AI Risk Management Framework. Orientation, not a certification or legal opinion.

            We attack the system before someone else does.

            EXHIBIT 07 · METHOD · FOUR STEPS

            AI red teaming · AI penetration testing · compliance readiness. Scope and timing depend on the system; we will tell you what is realistic before you commit.

            Bring the file to your next board meeting.

            We will walk your team through the attack path, map the doors that apply to your systems, and leave you with a scope you can approve — or decline with reasons.

            • A live AI attack demo, on your terms
            • Findings written for engineers and for the board
            • No production data leaves your environment
            DIRECT hello@00z.co
            REQUEST LIVE BRIEFING

            Book a live attack demo

            We store this request so we can reply. It is never added to a marketing list.
            MONTHLY AI ATTACK BRIEF

            This month in AI attacks

            One email a month: what changed, what got exploited, and the control that would have stopped it. Written for people who sign off, not just people who code.

            No trackers. Unsubscribe in one click.