A flat, advisory review of the chatbots, voice agents, and booking tools running your business — what they can see, what they can do on their own, and what happens when someone tries to trick them. No active testing. A short written report. No pitch attached.
Most automated tools get wired to work, not to be safe. The review walks each one the way an attacker would — across three surfaces.
The keys and logins your tools hold. The safe rule is the narrowest access for the one job — most tools hold far more.
Common find: a booking chat with full read/write to your whole customer database, when it only needs the calendar.
The actions a tool takes unsupervised. The goal isn't to slow things down — it's a human tap on anything that touches a customer or your reputation.
Common find: an assistant that confirms appointments — or sends quotes — on its own, including ones that were never real.
These tools follow instructions. The risk is that a stranger's message is an instruction, and the tool treats it as gospel.
Common find: a customer can type a message that talks your chat into revealing another customer's details — no hacking required.
I checked my own tools first. I found a login with far more access than it needed, and a system quietly rejecting work it should have handled. Both fixable in an afternoon — but I wouldn't have known without looking.
Geele Evans — Founder, Borne Systems. Ex-military systems administrator (8+ yrs), security-track. Borne is security-minded automation: I think like the attacker before I trust the tool.
Each exposure across the three surfaces, ranked by severity, with a plain-English fix for every one — and one headline risk called out up top.
The handful of changes that take the urgent risks off the board this week, written so whoever set your tools up can act on them directly.
You tell me what you use — a 15-minute walkthrough of the chatbot, voice agent, or automation, or read-only access.
I map the three surfaces — what it can reach, do on its own, and be tricked into. Advisory, no active testing.
You get the report in 48–72 hours, plus a short call to walk it through if you want one.
For a short written testimonial. Limited.
Flat, once the free spots are taken.
Flat. If it finds one real exposure, it pays for itself.
Tell me what you added this year. I'll tell you what it can see, do, and be tricked into — free for the first few.