←back to thread

Show HN: A free AI risk assessment tool for LLM applications

(www.gettavo.com)
37 points percyding99 | 4 comments | 15 May 25 12:50 UTC | HN request time: 0.001s | source

We’ve built an AI risk assessment tool designed specifically for GenAI/LLM applications. It's still early, but we’d love your feedback. Here’s what it does:

1. it performs comprehensive AI risk assessments by analyzing your codebase against different AI regulation/framework or even internal policies. It identifies potential issues and suggests fixes directly through one click PRs.

2. the first framework the platform supports is OWASP Top 10 for LLM Applications 2025, upcoming framework will be ISO 42001 as well as custom policy documents.

3. we're a small, early stage team, so the free tier offers 5 assessments per user. If you need more, just reach out, happy to help.

4. sign in via github is required. We request read access to scan code and write access to open PRs for fix suggestions.

5. we are looking for design partners to collaborate with us. If you are looking to build compliance-by-design AI products, we'd love to chat.

product url: https://www.gettavo.com/app

we'd really appreciate feedback on:

- what you like

- what you don't like

- what do you want to see for the next major feature

- bugs

- any other feedback

feel free to comment here or reach out directly: email: percyding@gettavo.com, linkedin: https://www.linkedin.com/in/percy-ding-a43861193/

Show context
Urahandystar ◴[16 May 25 09:01 UTC] No.44003226[source]▶
I get the feeling you're about to make a whole lot of money. I'd move away from enterprise and try to aim for hobby coders with a micro transactions.
replies(2): >>44003527 #>>44003559 #
1. percyding99 ◴[16 May 25 09:57 UTC] No.44003527[source]▶
-> I'd move away from enterprise and try to aim for hobby coders with a micro transactions.

Thanks! That's actually an interesting point. We've been trying to reach out to enterprise and get some early users + feedback from them, we will start reaching out to hobby coders or even vibe coder to try out the product as well

replies(1): >>44003706 #
2. Ciunkos ◴[16 May 25 10:30 UTC] No.44003706[source]▶
I believe this was just a joke. I bet only heavily regulated enterprises would be interested in a product like yours, to checkmark their compliance sheet. Regular coders and smaller businesses won’t care.
replies(1): >>44004097 #
3. percyding99 ◴[16 May 25 11:32 UTC] No.44004097[source]▶
Thanks for the feedback! We've had a few inbounds from early stage startups that try to sell to regulated industry so our assumption here is small startups might need our tool if they are targeting highly regulated industries(we could be completely wrong tho)

Joke or not, it actually made me consider reaching out to vibe coders, but yeah we are still validating the need

replies(1): >>44027836 #
4. Urahandystar ◴[19 May 25 09:10 UTC] No.44027836{3}[source]▶
For the record this is not a joke, This is a very active need for alot of vibecoders. They know they need security but they don't know how/what they are missing. Check out the Supabase or Lovable reddits, people reporting that they got stung by mass bot signups etc every other day. Sure these are complex apps but they are trying to launch the next big thing.

If your paying $20 a month for an LLM coding app whats a $5 fee to get a once over before launch? I imagine this will keep the lights on as you try an land the corporate whales.