EU-based AI Security Specialist

Securing AI
from prompt to production.

EU AI security company. LLM security testing, AI red teaming, EU AI Act & NIS2 compliance, model training & hardening, and agentic security. We help teams ship AI systems that survive real adversaries, from prompt injection and jailbreaks to multi-agent abuse and supply chain attacks.

Schedule a Call View Services

engagement · attack harness DEMO

Domiciled and operating

BlackUnicorn OÜ, Tallinn · your data stays in your boundary

10+

Years in security

Offensive, defensive, and the governance in between

Products in the arsenal

Open source where released · governed where it should not be

Principal on your engagement

The same person scopes it, runs it, and signs it off

Capabilities

Five disciplines,
one engagement.

The same principal runs offense, defense, and compliance. Hand-offs happen inside the engagement, not between vendors.

LLM Security Testing

AI red teaming, prompt injection, jailbreak and tool-abuse testing against models, agents, and RAG pipelines.

OWASP LLM Top 10NIST AI RMF

EU AI Act Compliance

Risk classification, conformity, and documentation, audit-ready for GPAI and high-risk systems.

AI ActGPAI

Model Training & Hardening

Custom defensive fine-tuning, refusal calibration, canaries, activation steering.

defense-in-depth

Agentic Framework Design

Safe-by-construction agent architectures with enforceable tool-use boundaries.

MCPsandbox

Security Architecture · Advisory

Fractional CISO engagements for scale-ups entering regulated markets.

Advise

The Arsenal

Seven products, one lifecycle.

Learn → Defend → Test → Harden → Operate. Every stage has a tool behind it, built in our own engagements and open-sourced where we could release it.

TestDojoLM544 attack patterns across 49 groups, run against your models, agents and RAG pipelines. It is the platform our own engagements run on.Open source OperateBAMSThe governed agent platform we run our own fleet on, installed inside your boundary. Approvals, circuit breakers, and an audit trail that holds up.Enterprise LearnBasileakA deliberately insecure LLM you can attack safely.OWASP project DefendBonkLMGuardrails that catch threats in-process, before your users do.Open source DefendRuneLMA fail-closed proxy: nothing sensitive leaves your perimeter in the clear.Open source TestSenseiThe red-team model that generates attacks instead of replaying a list.Enterprise HardenShogunThe defensive model, hardened against our own attack engine and released only when it clears its gate.Coming soon

Industries

Who we protect.

Tailored security for industries navigating AI adoption and EU regulation.

AI StartupsSecurity-first architecture for AI-native companies.startup
AI-Native CompaniesModel training, agent security, and AI ops.AI ops
SaaSApplication security for cloud platforms.cloud
HealthcareData protection and compliance.GDPR · HDS
Financial ServicesDORA compliance and security testing.DORA
Critical InfrastructureNIS2 and operational technology security.NIS2 · OT

Methodology

“Methodology grounded in OWASP LLM Top 10, NIST AI RMF, and the EU AI Act. Backed by purpose-built open-source tooling, we don't just audit your AI, we ship the tools that test it.”

BLACKUNICORN

EU AI security company

Get in touch

Ready to secure your AI?

From LLM pentesting to EU compliance, we help organizations build security into their AI systems from day one.

Schedule a Call View Services

Securing AIfrom prompt to production.