Twelve controls · six minutes
Regulators in Singapore, the US and the EU have converged on the same expectation: every autonomous agent carries a unique identity, and every action traces back to a human who authorised it. Named Principal gives every AI agent a named human owner, bounded authority, risk-based approval, and an audit-ready record — starting with knowing exactly where your organisation stands today.
We store your email and your scores. Nothing else. No agent names, no system details. Privacy notice
Three steps from "we think we have some AI agents" to a governed, auditable estate.
Score your organisation across twelve controls, or one specific agent across nine risk factors — six minutes, no account needed.
Save the result as a persistent Agent Passport — identity, purpose, named owner, and the controls its risk tier requires.
A named principal signs off before an agent goes live. Every decision is timestamped and kept — evidence, not memory.
Two are free to use with nothing stored unless you ask. The third — the persistent record — needs an account, because a record that isn't kept isn't a record.
Twelve controls, six minutes. Where your organisation stands against IMDA, MAS, NIST, ISO 42001 and the EU AI Act, and the three fixes that matter most.
You're looking at it ↓Nine questions about one specific agent. Returns its risk tier, the OWASP agentic risks it exposes you to, and the controls that become mandatory before deployment.
Open the profiler →A persistent record per agent — identity, accountability, risk and approval history — instead of a result that disappears when the tab closes.
Sign in →Every control maps to the provisions regulators and auditors already reference — one assessment, five frameworks, kept current.
The agent risk profiler runs entirely in your browser — no network calls, no storage, nothing transmitted. Agent names and purposes describe your internal architecture, so they never leave your device.
The organisational assessment stores only what you explicitly submit for a report: your email, your organisation name if given, and your scores. Never your individual answers. See the full privacy notice for what's collected, why, and how to have it deleted.