Our focus
Security that fits
the software delivery cycle
from discovery to retest
3
Core practice areas
5
Languages available on this site
1
US operating company
ASSESS
REMEDIATE
VERIFY
ASSESS
REMEDIATE
VERIFY
ASSESS
REMEDIATE
VERIFY
ASSESS
REMEDIATE
VERIFY
API inventory
Map the surface
Access review
Trace permission paths
Secret hygiene
Reduce exposure
Retest evidence
Close the loop
Security services
Focused reviews for
teams shipping APIs
and AI-enabled systems
API Security Assessment
Inventory endpoints, inspect auth paths and deliver a prioritized, retestable findings report.
Access Control Review
Trace roles and privileges to uncover excessive access and ownership gaps.
Secret & Configuration Review
Review authorized repositories and configuration for exposed secrets and risky defaults.
AI Integration Review
Review model access, keys, data handling and policy boundaries for AI-connected workflows.
Defined scope and authorization- Actionable findings and ownership
- Evidence for a focused retest
Product direction
A clearer view of
API risk and access
Mardle API Audit is a local-first concept for asset, authorization and evidence review. API Posture Cloud and Agent Guard are planned directions, not released products.
- API Audit / local-first baseline
- API Posture Cloud / planned
Our method
One workflow from
scope to evidence
and verified fixes
Every engagement starts with an agreed asset and access boundary. We record findings, assign remediation paths and retest the fixes that matter.
Authorized assessment
Developer-ready reporting
ENGAGEMENT OPTIONS
ENGAGEMENT OPTIONS
ENGAGEMENT OPTIONS
ENGAGEMENT OPTIONS
ENGAGEMENT OPTIONS
ENGAGEMENT OPTIONS
ENGAGEMENT OPTIONS
ENGAGEMENT OPTIONS
ENGAGEMENT OPTIONS
ENGAGEMENT OPTIONS
ENGAGEMENT OPTIONS
ENGAGEMENT OPTIONS
API assessment
Scoped
Focus
- Asset inventory
- Authorization paths
- Prioritized findings
- Remediation guidance
- Retest evidence
- Clear report
Access review
Scoped
Focus
- Role and privilege map
- Ownership review
- Excessive access
- Risk prioritization
- Fix guidance
- Retest evidence
AI integration
Scoped
Focus
- Model access
- Key lifecycle
- Data boundaries
- Policy review
- Audit trail
- Remediation plan
API Audit
Concept
Focus
- OpenAPI baseline
- Local-first review
- Access checks
- Evidence export
- Developer workflow
- Concept stage
Posture Cloud
Planned
Focus
- Continuous posture
- Asset inventory
- Ownership tracking
- Evidence workflow
- Cloud dashboard
- Planned direction
Agent Guard
Research
Focus
- AI access policy
- Key governance
- Sensitive-data paths
- Audit events
- Client-side control
- Research direction
Working principles
The way we assess
and close risk
Work starts only from agreed systems and a clear assessment boundary.
Authorized scope
Mardle practice
Findings are written for owners, developers and a targeted retest.
Evidence over noise
Mardle practice
Sensitive data is handled conservatively and retained only as needed.
Minimum necessary
Mardle practice
Work starts only from agreed systems and a clear assessment boundary.
Authorized scope
Mardle practice
Findings are written for owners, developers and a targeted retest.
Evidence over noise
Mardle practice
Sensitive data is handled conservatively and retained only as needed.
Minimum necessary
Mardle practice
