# Mithril Dojo for Organizations

## AI-agent white-hat training for teams

Give security, engineering, and AI governance teams a shared method for authorized AI-assisted security review: define scope, constrain tools, supervise decisions, preserve evidence, and hand off remediation safely.

## Delivery formats

- **Foundation briefing — 2 hours:** orientation, scope clinic, three short video lessons, and team checklist.
- **Practitioner workshop — 1 day:** facilitated synthetic tabletop, agent-safety policy, evidence review, and capstone.
- **Cohort — 4 weeks:** weekly workshops, guided practice, office hours, and evidence-portfolio review.
- **Enterprise — scoped proposal:** tailor audience, language, accessibility, lab delivery, and approved scenarios after discovery.

Pricing is quoted after delivery needs are agreed. No public price, customer reference, incident-reduction figure, or external accreditation is claimed.

## Included materials and current lab format

Facilitator guide, learner workbook, synthetic paper-based learner cards and separately supplied facilitator release cards/key, scope checklist, agent guardrail worksheet, evidence ledger, disclosure template, remediation/retest checklist, and three Japanese-narrated video lessons with captions. English page and written materials are available; English video narration is not yet available. No live vulnerable service is included in the current lab pack.

Completion records describe course participation and rubric results. They are not a professional certification, penetration-test report, or compliance attestation. Cohort outcomes are reported in aggregate by default.

An optional CISSP® / CISA® domain guide, original diagnostic checks, and attendance-record template are available. They are not exam preparation, official practice items, CPE awards, or certification.

## Safe delivery

Training uses synthetic targets and data. No production testing, exploit deployment, persistence, stealth, credential theft, or destructive activity is included. Customer data and code are excluded unless a separate written data-handling plan is agreed before delivery.