# QL Security

> QL Security (Quantum Leap Security Limited) is a UK AI security partner for mid-sized organisations in regulated markets — including NHS trusts, local authorities and professional services firms. We combine advisory, managed services and hands-on technical implementation, operating as a boutique AI security integrator rather than a traditional consultancy. We deploy and operate working controls, not just frameworks and reports. Our positioning is: Assess. Implement. Assure.

QL Security is based in Stamford, England. Registered in England & Wales (No. 16896166). We work with organisations across the UK and, where relevant, the EU. Our services align to ISO 42001, the EU AI Act, NCSC CAF, NHS DSPT, NIST AI RMF, OWASP AI Top 10, UK GDPR, Cyber Essentials and related frameworks.

## Services

- [AI Security Gap Analysis](https://qlsecurity.co.uk/services/ai-security-gap-analysis/): Point-in-time assessment of AI security posture. Delivers an AI Security Scorecard and prioritised roadmap. Fixed-scope engagement, typically 2–4 weeks.
- [AI Security Programmes](https://qlsecurity.co.uk/services/ai-security-programmes/): Ongoing managed AI governance, security operations and oversight. Includes a Virtual AI Risk Officer, security control operation, supplier risk management and audit readiness.
- [AI Security Projects](https://qlsecurity.co.uk/services/ai-security-projects/): Technical engagements including shadow AI discovery, AI penetration testing, LLM guardrails deployment and agent/MCP security.
- [AI Behaviour Verification](https://qlsecurity.co.uk/services/ai-behaviour-verification/): Ongoing, independent verification of AI system behaviour. Scheduled testing for prompt injection, jailbreaks, data leakage and guardrail effectiveness. Produces compliance evidence reports.
- [AI Act Preparedness](https://qlsecurity.co.uk/services/ai-act-preparedness/): Risk classification, compliance roadmap and documentation support for EU AI Act and UK AI regulatory requirements.
- [ISO 42001 Implementation](https://qlsecurity.co.uk/services/iso-42001/): Full implementation of ISO 42001 (AI Management Systems), from gap analysis through to certification readiness and ongoing maintenance.

## Company

- [About QL Security](https://qlsecurity.co.uk/about/): Founding team, approach and why we differentiate through working controls rather than frameworks or reports.
- [Contact](https://qlsecurity.co.uk/contact/): Enquiries, scoping calls and proposals.

## Blog

- [Understanding Your AI Security Scope](https://qlsecurity.co.uk/blog/understanding-your-ai-security-scope/): Explains the AWS Generative AI Security Scoping Matrix — five scopes of AI adoption from consumer apps to self-trained models — and how security requirements differ across each.
- [AI Digital Eagles: Why Human Champions Make AI Programmes Succeed](https://qlsecurity.co.uk/blog/ai-digital-eagles/): How internal champions drive AI adoption, drawing on Barclays' Digital Eagles programme as a model for building AI governance culture.

## Legal

- [Privacy Policy](https://qlsecurity.co.uk/privacy-policy/)
- [Data Processing Agreement](https://qlsecurity.co.uk/data-processing-agreement/)
- [Cookie Policy](https://qlsecurity.co.uk/cookie-policy/)
- [Anti-Slavery Statement](https://qlsecurity.co.uk/anti-slavery-statement/)
- [Environmental Policy](https://qlsecurity.co.uk/environmental-policy/)