AI pentesting vendor Agent Shield discloses liability insurance, publishes no carrier or coverage limit
The autonomous-agent security tester, sold under the brand Tough Love Security into HIPAA-regulated medical practices, states it carries professional liability cover but names no insurer, limit or claims process.
Agent Shield, an AI agent that runs authorized penetration tests and is marketed under the brand Tough Love Security at agentshield.win, states on its site that it carries liability insurance but does not name a carrier or a coverage limit, according to the company's own published materials reviewed by AI Dispatch.
The product runs AI agents against web applications and APIs under signed client authorization. "The AI agents do the heavy lifting — recon, data flow analysis, payload generation, exploitation — but a human validates each finding, removes false positives, and writes remediation guidance," the site states. Testing is contractually bounded: "Testing is conducted exclusively within the boundaries defined in the testing agreement. Any systems, endpoints, or networks not explicitly listed in the scope document will not be tested."
On insurance, the site states plainly: "We carry professional liability insurance." No carrier, policy limit or claims-handling process accompanies the statement anywhere on the page. Liability is capped separately, and lower: "Our liability is limited to the engagement fee paid." AI Dispatch's index records Agent Shield's insurance-carrier and coverage-limit fields as "no public information" for the same page.
The gap is relevant to who the product is sold to. Agent Shield markets directly into a regulated sector: "Built specifically for small medical, dental, and behavioral-health practices preparing for OCR," referring to the HHS Office for Civil Rights, which enforces HIPAA. Its flagship offer is priced at "First Pass Your HIPAA Audit in 30 Days — $3,500 Flat." A medical practice buying a HIPAA-focused security assessment is buying it from a vendor that discloses insurance exists without disclosing what it would actually pay out.
AI Dispatch's full index and sourcing are published at aidispatch.news, with a source URL, retrieval timestamp and quote attached to every field.
Sources 6
“The AI agents do the heavy lifting — recon, data flow analysis, payload generation, exploitation — but a human validates each finding, removes false positives, and writes remediation guidance.”
agentshield.win · checked Aug 1, 2026“Testing is conducted exclusively within the boundaries defined in the testing agreement. Any systems, endpoints, or networks not explicitly listed in the scope document will not be tested.”
agentshield.win · checked Aug 1, 2026“We carry professional liability insurance.”
agentshield.win · checked Aug 1, 2026“Our liability is limited to the engagement fee paid.”
agentshield.win · checked Aug 1, 2026“Built specifically for small medical, dental, and behavioral-health practices preparing for OCR.”
agentshield.win · checked Aug 1, 2026“First Pass Your HIPAA Audit in 30 Days — $3,500 Flat”
agentshield.win · checked Aug 1, 2026