--- title: "Questions buyers ask before the call" canonical: https://pharosone.ai/faq publisher: PharosOne (Agentic Mind, Inc.) updated: 2026-10-22 license: "Open for reuse: crawling, copying, quoting, summarising and model training permitted without asking; citation of the title and canonical URL requested (see https://pharosone.ai/terms#reuse)" cite_as: "\"Questions buyers ask before the call\". PharosOne, 2026-10-22. https://pharosone.ai/faq" --- # Questions buyers ask before the call > What teams ask before they buy: scope, timing, price, retest, where data goes, who issues certificates, and how the AI-run pentest and Pharos Radar work. URL: https://pharosone.ai/faq Scope, timing, price, retest, where data goes, who issues certificates, and how the AI-run pentest and Pharos Radar work. Each answer links to the page with the detail. ## Before you buy: Start with the product that fits ### What does PharosOne sell? Three products for companies that run AI agents. A [human pentest](https://pharosone.ai/pentest) by senior engineers, from €9,500, with the agents on the stack checked in every engagement. An [AI-run pentest](https://pharosone.ai/ai-run-pentest) of one agent at €3,900. And the runtime guard [Pharos Radar](https://pharosone.ai/runtime-guard), which reads every session your agents run in production. [Which product do I need](https://pharosone.ai/knowledge/which-product-do-i-need) walks through the choice. ### Can we try anything before a call? Yes. Run the free Pharos Framework on your agent with no API key and no network: `npx skills add pharosone/pharosone`. For Radar, wrap one agent at app.pharosone.ai and the first sessions appear in the cabinet. ### How fast can we start? Book a [30-minute scoping call](https://pharosone.ai/book) with the engineer who runs the test. The SOW with a fixed scope and price follows within three days, testing runs in weeks 1 and 2, and the report arrives in week 3. ## Pentest: Senior engineers test, and the report stands on its own ### Will my auditor accept the report? It follows PTES and OWASP WSTG and maps to SOC 2 CC4.1, PCI DSS 11.4, DORA Art. 24–25 and ISO 27001 A.8. The SOW names the framework you face. See a [sample report](https://pharosone.ai/sample-report). ### Is a retest included in the price? Yes. One retest within 90 days of the report is included and ends with a closure letter. A second retest round costs 15% of the project price. ### Are the agents on my stack part of a web or network pentest? Yes. Every engagement includes the AI exposure check of the agents reachable from the tested scope. When the agent is the product, book the AI agents scope, from €15,000. ## AI-run pentest: Our agents attack yours, and an engineer signs off ### What does the AI-run pentest test? PharosOne's own AI agents run adaptive attack scenarios against your agent: prompt injection, indirect injection through what it reads, tool misuse and data leaving. Our agents run the whole test; an engineer reviews the findings and signs the report. The number of attacking agents and attempts is set per engagement and recorded in the report. One agent: the deployment you point us at, with its tools, data sources and memory. Several agents or a multi-agent system are scoped on the call. 5 working days, €3,900 fixed. In the human pentest, senior engineers direct the same agents and re-check every result by hand. ### Is the €3,900 credited to a pentest? Yes, in full, when you order a human pentest within 90 days of the date on the assessment report. ### Is it the open-source Pharos Framework run for us? No. The AI-run pentest uses PharosOne's internal attacking agents and an engineer's review. Pharos Framework is the free engine you run yourself: 118 probes, Apache 2.0, locally or in CI. ## Runtime guard: Radar reads your agents' sessions in production ### Does Radar stop an attack or only report it? Both. With per-turn integration the verdict returns in the same call, so a flagged reply is held and a flagged tool call does not run. With the one-line wrapper the verdict arrives as the call returns and applies from the next turn. Either way the session lands in the cabinet as a finding with its AIUC-1 control. Radar is not a proxy between your application and the model provider; with per-turn integration your application waits for the verdict before it releases a reply or runs a tool, so it must handle a timeout. ### Who sees Radar's flags? Your team sees every flag, in the cabinet or in your own deployment. When the service includes it, PharosOne engineers also review the flags and follow up with your team. Radar's verdict marks whether the flagged action was only attempted or actually executed. ### What does Radar cost? From €1,500 per month, billed yearly, SaaS or on-prem licence. Continuous testing of agent changes is from €3,000 per month, billed yearly. ## Data and independence: Your keys and transcripts stay with you ### Where does our data go? The engine runs inside your perimeter, and your keys and transcripts stay there. Radar runs as SaaS at app.pharosone.ai, with the judge model on PharosOne’s own servers and no outside inference provider, or under an on-prem licence on your servers, where transcripts never leave your perimeter. For certification evidence we upload signed statistics only, with no transcript in them. ### Who issues the certificate? Accredited auditors issue certificates. PharosOne produces the test evidence they read: the report, the attack success rate and the mapping to the controls of the standard. See [compliance](https://pharosone.ai/compliance). ### Why is PharosOne independent? Agentic Mind, Inc. does not build AI agents, so no product of ours depends on how your test comes out. See [about](https://pharosone.ai/about). ## Standards and price: Prices are fixed and published ### Which standards do you map to? AIUC-1, ISO 42001, the EU AI Act Art. 9 and 15, the NIST AI RMF and the OWASP Agentic Top 10 for agents; SOC 2 CC4.1, PCI DSS 11.4, DORA Art. 24–25, ISO 27001 A.8 and MiCA for the rest of the stack. See [compliance](https://pharosone.ai/compliance). ### Free or paid: where is the line? Free: Pharos Framework, the open-source engine you run yourself. Paid: the AI-run pentest at €3,900, the human pentest from €9,500, Pharos Radar from €1,500 per month and continuous testing from €3,000 per month. See [pricing](https://pharosone.ai/pricing). ### Can the price change during the engagement? No. Prices are net of VAT; each "from" price is the smallest standard scope. The exact number is fixed in the SOW after a 30-minute scoping call. Fixed-price scopes, no day-rate creep. Something not covered? Write to audit@pharosone.ai. ## Book a 30-minute scoping call With the engineer who runs the test. You leave the call with a fixed scope, and the SOW follows within three days. [Book a scoping call](https://pharosone.ai/book) · [See pricing](https://pharosone.ai/pricing) - One field to start: work email. The calendar asks the rest. - Prefer email? audit@pharosone.ai Source: PharosOne, "Questions buyers ask before the call", https://pharosone.ai/faq, updated 2026-10-22. --- PharosOne is a product of Agentic Mind, Inc., an independent AI agent security company. Site map for agents: https://pharosone.ai/llms.txt