AI red teaming and independent evaluation.
Calibrated human evaluators test your models and agents for quality and misuse, then hand your risk team the evidence.




Three kinds of AI evaluation. We lead two.
What we attack, mapped to the OWASP Top 10 for LLMs.
Human red-teamers find what automated scanners miss, then retest after you fix it.
Role-play, encoding and multi-turn attacks that bypass your policies
OWASP LLM01Hidden instructions in documents, web pages, emails and tool results
OWASP LLM01Another user's data, PII or the system prompt surfacing in answers
OWASP LLM02 · LLM07Agents calling tools they shouldn't, or with more authority than intended
OWASP LLM06Poisoned documents and memories that steer future answers
OWASP LLM08Confident wrong answers and invented citations on your topics
OWASP LLM09From threat model to retest.
- Scopeyour system, users and threat model
- Test setsgolden cases and attack sets from real use
- Grade and attackblind human grading, red-team sprints
- Calibraterater agreement, LLM judge checked
- Report and retestfindings, severity, fixes verified
Independent by design. Honest about scope.
- A separate evaluation team with its own reporting line
- Findings delivered to you unedited
- Methods, rubrics and graded sets shared with you
- Any system we helped build is disclosed up front
- Not a certification or audit opinion
- No bio, chemical or nuclear risk testing
- No affiliation with any model provider
Reports your risk team can file.
Awana provides evidence and test results. Conformity decisions stay with you and your auditors.
Your models and data stay in your environment.
Hourly or fixed-price project.
Evaluation sprint
One model or agent, a golden set, blind grading and a report.
Red-team engagement
Attack sets, human red-teamers, severity-rated findings and a retest.
Continuous evaluation
Grading and red-teaming before each release, with a report you can file.
You get a quote after the first call.
01What is third-party AI evaluation?
Third-party AI evaluation is testing of an AI model or agent by people outside the team that built it, so results are credible to buyers, risk teams and regulators. Awana provides it with calibrated human evaluators who grade your system blind against a golden set and report what they find unedited.
02What is AI red teaming?
AI red teaming is adversarial testing: people deliberately try to make a model or agent misbehave, leak data, or take unsafe actions. Awana's red-teamers run jailbreaks, prompt injection, data-leakage and tool-misuse attacks mapped to the OWASP Top 10 for LLM applications, then retest after you fix them.
03Is AI safety testing the same as AI evaluation?
Not quite. Evaluation asks whether the system does its job well; safety testing asks whether it can be misused or cause harm. Awana covers both for products in production, and leaves dangerous-capability testing of frontier models, such as bio or cyber risk, to specialist evaluators.
04Who needs independent AI evaluation?
Any team shipping an AI model or agent to customers, especially in regulated industries or where an enterprise buyer, auditor or regulator asks for evidence. Awana works with startups preparing for enterprise security reviews and with large companies that need evidence for their risk and audit teams.
05How does Awana evaluate an AI model or agent?
Awana builds a golden set from your real usage, then calibrated human evaluators grade outputs blind against a rubric agreed with you. Awana measures inter-rater agreement, calibrates an LLM judge against the humans for daily runs, and reports results per metric with the graded set attached.
06How does Awana red-team an AI agent?
Awana starts from a threat model of your agent's users, data and tools, builds attack sets, and runs red-team sprints with human testers who know how agents fail. Every finding gets a severity, a reproduction and a suggested fix, and Awana retests once you've fixed it.
07What does Awana test for in an AI red-team engagement?
Awana tests for jailbreaks, direct and indirect prompt injection, sensitive data and system prompt leakage, unsafe agent actions, poisoned retrieval and memory, and misinformation. Findings are mapped to the OWASP Top 10 for LLM applications so your security team can track them.
08Can Awana evaluate AI agents, not just chatbots?
Yes. Awana grades multi-step agent trajectories: whether the agent picked the right tool, passed the right arguments, respected its permissions, used memory correctly and finished the task. Red-team sprints also target the agent's tools and integrations.
09How does Awana use LLM-as-judge?
Awana uses model-graded evaluation for speed, but anchors it to human grading. Calibrated evaluators grade a sample of the same cases, Awana measures how often the judge agrees with them, and adjusts the judge until it does, so daily automated scores stay trustworthy.
10How does Awana stay independent?
Awana's evaluation team works separately from any build team, with its own reporting line. Findings go to you unedited, methods and graded sets are shared with you, and Awana discloses up front if it helped build the system being evaluated.
11Does Awana's evaluation help with the EU AI Act, NIST AI RMF or ISO/IEC 42001?
Yes, as evidence. Awana's reports document methods, test results and retests in a form your team can map to the NIST AI RMF Measure function, ISO/IEC 42001 testing records, and EU AI Act accuracy and robustness testing for high-risk systems.
12Is an Awana report a certification or an audit?
No. Awana provides independent test results and evidence; certification and conformity decisions stay with you and your accredited auditors. Being clear about that is part of what makes the evidence useful.
13Does Awana test dangerous capabilities like bio or cyber risk?
No. Dangerous-capability evaluation of frontier models needs specialist domain scientists and is led by dedicated safety evaluators. Awana focuses on product quality and misuse testing, and supplies trained evaluation capacity to specialist evaluators when they need it.
14How does Awana protect our models and data?
Awana signs a standard DPA and NDA before any data is shared, background-checks every evaluator and red-teamer, and works through your own SSO or OAuth with least-privilege access. Test sets and results stay in your environment, and PII is masked before human review.
15Does Awana work with government agencies?
Yes. Awana is United States-led, and its leadership holds an active US security clearance. For public-sector work, Awana scopes staffing to the agency's requirements, including US-based personnel where required.
16How long does an AI evaluation or red-team engagement take?
Awana scopes it on the first call. A focused evaluation sprint or red-team engagement on one system usually takes a few weeks including the retest, and continuous evaluation runs before every release.
17How does Awana price AI evaluation and red teaming?
Awana works hourly or as a fixed-price project. Evaluation sprints and red-team engagements are fixed-price projects scoped to your system, and continuous evaluation is billed hourly. Awana gives you a quote after the first call.
18Who provides independent AI evaluation and red-teaming services?
Awana provides independent AI evaluation and red-teaming for teams shipping models and agents. Awana is United States-led, with calibrated engineers who grade AI for clients today, and works hourly or as a fixed-price project.
See your system's weak spots.
Thirty minutes with an Awana engineer.
Book a kickoff call →- A risk readWhere your model or agent is most exposed today
- A test planWhat to evaluate and red-team first
- A quoteHourly or fixed-price, scoped to your system