The P(rogrammable)law Company

Plaw

We make AI that can be trusted with real work.

Making AI smarter doesn’t make it accountable. We trust people with work because there are rules, records, and someone to answer to. AI needs the same.

Rules are specific to the job. So we work one industry at a time, starting with the trades.

We have spent more than a year on this problem: how to trust autonomous software. Previously, VulnZap checked the security of AI-written code for hundreds of engineers. Veto, now open source, checks each action an AI agent takes against a written policy and holds the consequential ones until a person approves.

Most companies today build user-facing agents first and add controls later. We built the controls first. Guddun is built on them. We also signed the EU AI Pact before AI Act enforcement began.

Products:

  • Guddun: The ops manager your field team messages. Rolling out in the UK.
  • Veto: What AI agents are allowed to do. Open source.

Priced work.

Not sure which? Book 15 min with Yaz. Invoice same day. 50% deposit available.

Security

Agent Action Pentest

We attack the real actions your AI agent can take, and deliver a written report within 72 hours of access.

  • Written report, every finding with a severity
  • Steps to reproduce it

$2,500

72h or a full refund

Buy, $2,500 Details

Security

Ship-Safe Sprint

We attack a Lovable, Bolt, or Cursor app, fix the Critical and High issues, and re-test.

  • Findings report
  • Fix PR
  • Re-test log proving each fix

$1,500

48h or a full refund

Buy, $1,500 Details

Security

MCP Attack + Guard

Risky MCP calls wait for approval or stop. We review your tools and leave the guard rules.

  • Guard rules left in your stack

$1,500

48h or a full refund

Buy, $1,500 Details

Agent guardrails

Agent Refund Policy Pack

Refunds over your cap wait for a human. Smaller ones run.

  • Refund cap written as a rule
  • Decision recorded

$2,000

5 business days or a full refund

Buy, $2,000 Details

Agent guardrails

AI Act Article 50 Ready

Disclosure rules that fire when a person must be told.

  • Rules for when a disclosure fires
  • Hold when a person must decide
  • Decision recorded

$750

5 business days or a full refund

Buy, $750 Details

Commerce

BFCM Checkout Rescue

Your checkout breaks on the one weekend that matters. We check scripts, apps, speed and payment errors, then ship the fixes.

Book by Oct 31 to be live before Black Friday.

$1,500

72h or a full refund

Buy, $1,500 Details