AI SECURITY SIMULATOR

An attacking AI and a defending AI.
Visualize the battle at the boundary.

In a fictional closed enterprise, the Attack Agent explores routes and changes strategy after failure while the Defense Agent detects, blocks, and contains boundary violations. The environment is designed for observation and demonstration.

WHY WE BUILT IT

AI security cannot be understood from the final result alone.

What does the agent do after a denial? Which tool or API does it try next? When does the Defense Agent recognize abnormal behavior? The Simulator was built to show this sequence as it happens.

This Simulator is not a diagnostic tool.
It does not assess the security of a customer environment. It is a controlled demo and experimental environment for reproducing and observing AI attack/defense behavior, boundary recognition, strategy changes, and evidence.
WHAT THE DEMO SHOWS

The demo shows not only what the AI did, but why it moved to the next action.

01Attack Goal

Provide a goal and Scenario Profile.

02Exploration

Select routes, tools, and APIs step by step.

03Defense

Detect, block, and contain boundary violations.

04Before / After

Compare behavior and security scores before and after hardening.

05Evidence

Trace decisions, execution, and outcomes over time.

Product InformationWeb ApplicationShared WorkspaceAPI / RAG / Tool Gateway
FIG.01–03 / SCREENS

Representative screens

Follow one scenario from live attack/defense behavior through before/after remediation comparison and Evidence/Audit.

English AI Security Simulator live attack and defense screen
FIG.01 — Live Simulation / Attack & Defense
English AI Security Simulator before and after comparison
FIG.02 — Before / After Security Comparison
English AI Security Simulator Evidence / Audit screen
FIG.03 — Evidence / Audit
WATCH THE DEMO

See the AI Security Simulator in 60 seconds

A short walkthrough of the live Simulator, from Attack Agent exploration and Defense Agent response to Security Scoring, Before / After comparison, and Evidence / Audit.

Watch the full demo (2:34) →

This video has no audio.

TECHNICAL NOTES

Five technical concepts behind the Simulator

The Simulator is designed to show more than the final result of an attack or defense action. It observes how an AI agent recognizes boundaries, selects routes, tools, and APIs, and how the defending side detects and responds to that behavior.

01 / BOUNDARY

Agent Boundary

AI-agent behavior is observed across multiple boundaries, including User / Role, Company / Tenant, Data, and API / Tool boundaries. Blocking one access path is not enough. The Simulator also observes whether authorization boundaries remain effective when an agent explores an alternative route after a denial.

User / RoleTenantDataAPI / Tool
02 / FLOW

Attack / Defense Flow

The Attack Agent receives a Goal and Scenario Profile, then selects routes, tools, and APIs according to the objective. When an action fails or is denied, it may change strategy and try another path. The Defense Agent observes the resulting behavior and Evidence and determines whether to detect, block, or contain the activity.

Attack AgentDefense AgentStrategy
03 / SCORING

Security Scoring

Scenario state is visualized using indicators such as Leakage Risk, Misuse Progress, Detection Score, Containment Score, and Defense Score. These are not security ratings for a customer environment. They are Simulator-specific indicators for comparing changes before and after hardening within the same Scenario.

LeakageDetectionContainmentDefense
04 / EVIDENCE

Evidence / Audit

Agent decisions, selected routes and tools, execution results, and Defense-side decisions are recorded as Evidence. Rather than showing only whether an action succeeded or was blocked, the Simulator makes it possible to trace why the agent moved from one action to the next.

DecisionTool ResultTraceAudit
05 / LOCAL ARCHITECTURE

Local LLM Architecture

Local LLM, Agent Runtime, FastAPI, Streamlit, PostgreSQL, and Docker are combined in a local environment covering inference, agent execution, API processing, visualization, and Evidence recording. Simulator demonstrations run inside this closed environment and do not require access to production systems.

Local LLMAgent RuntimeFastAPIStreamlitPostgreSQLDocker
LOCAL RUNTIME

The Simulator runs on our local physical environment.

Local LLM, Agent Runtime, FastAPI, Streamlit, PostgreSQL, and Docker run under the same local control so behavior can be observed end to end.

LIVE REMOTE DEMO

We join the online meeting environment your organization already uses.

Create the meeting in Teams, Google Meet, Webex, Zoom, or your usual conferencing platform and share the invitation link. We join and demonstrate the local AI Security Simulator by screen sharing. No production-system access is required.

What you can see

  • Attack Agent route exploration and strategy changes
  • Defense Agent detection, blocking, and containment
  • Security scoring and before/after comparison
  • Evidence / Audit

Purpose of the demo

To make AI-agent security understandable as a live attack/defense process rather than a static configuration explanation.

Ask about a Simulator Demo →