A boutique practice built on security engineering and product development.

Banbreach helps organisations turn promising AI agent workflows into controlled, testable and economically justified business operations. The firm is led by a principal who has secured and shipped real products. We do not run a delivery bench, we do not resell platforms, and we do not take engagements whose success depends on selling the next one.

Last reviewed: October 2026.

The principal

The people who do the work. Every credential below is either shown with the evidence that checks it, or explicitly marked as pending — nothing in between.

Suman Kar, Principal

Principal — security engineering and AI workflow assurance

Kolkata, India (IST)

Background

Cyber security. 20 years in product security and incident response for firms; handled multiple databreaches; expert witness.
Product development. 15 years of product experience from device drivers, to desktop apps, as well as SaaS with installed userbase in millions.
MBA (Strategy), HEC-Paris | ex-Adobe | BE (Computer Science), IIEST Shibpur, India; Bayesian Data Analysis, Aalto Univerity.

At Banbreach

Leads AI Workflow Assessments and the DFIR for AI service; first responder on the urgent channel.

LinkedIn profile Writing

Where this approach comes from

We did not start from AI. We started from two fields where failure is expensive and discipline is non-negotiable.

From cyber security we bring the habits of assuming hostile input, granting the least privilege that works, separating who proposes from who approves, and keeping an audit trail. Experience of leading incident-response and application-security programmes for business systems handling millions of transactions.

From product development we bring the habits of defining "done" before building, setting release gates, instrumenting what ships, and counting what each unit of value costs. Full lifecycle ownership of building and operating B2B products where release gates and unit economics were standing board-level topics.

AI agents inherit both sets of problems: they accept untrusted input and they are products with an operating cost. The assessment applies both.

What this experience does not cover. This experience does not include safety-critical or safety-certified systems such as medical devices or avionics. If an engagement needs expertise we do not have, we will say so and help you find it.

Mission and positioning

AI agents are crossing from demos into consequential business workflows — drafting, deciding, sending, spending. The industry's default answer to the resulting risk is more capability and longer prompt instructions. Ours is engineering discipline: permissions that are enforced, policies a machine can check, tests over the workflow's properties, economics that make the operating cost visible, and named humans who own the material decisions.

Our verification policy. Every credential on this page can be checked. Each biography links to public evidence: professional profiles, publications, talks or code. We do not name past employers or clients without written permission, and we state what our experience does and does not cover. If you want to verify a claim, contact us and we will point you to the evidence.

In the media

Coverage of the firm and its principal — verifiable entries only — plus the speaking and media kit: bios, headshots, topics and the press contact route.

Press & media

Evidence and claims policy

Measured, sourced, or labelled

Every claim we publish is either measured, sourced to a primary reference, or explicitly labelled as an estimate or hypothesis. We keep those categories visually separate — in reports, on this site, and in conversation. When we do not know, the deliverable says so.

Limitations stated where they could be missed

A test suite provides evidence over tested cases and properties. A formal proof establishes only the stated property under its assumptions. Neither makes a whole business process safe — and our work says so at the exact points where a reader might assume otherwise.

No fabricated credibility

No invented testimonials, client logos, customer counts, project counts, case-study outcomes or performance claims appear anywhere in our work. Demonstrations use synthetic data and are labelled as illustrative.

The client's decision, defended

Our job is to make a decision defensible — deploy, redesign or decline — with evidence, costs and residual risk stated. We are as valuable when the answer is 'no' as when it is 'go'.

How engagements work

One workflow at a time, examined end-to-end rather than a portfolio skimmed in bulk.
The principal does the work. You work with the same person who pitched, and every assessment is led and written by a principal.
Redacted or synthetic artefacts by default; we ask for the least data that makes the analysis sound.
Findings written to be acted on: each control has an owner, a cost and an acceptance criterion.
What we hand over is yours: maps, tests, models and the evaluation plan — no dependency on us to read them.
When your workflow needs building, we design it and hand a specification to your engineers or a partner you choose. We do not sell the build.

Security and confidentiality

We treat client material the way we advise clients to treat theirs: least data, controlled access, explicit lifetimes. Engagements use redacted or synthetic artefacts wherever the analysis allows it; production credentials are never requested; working material lives in access-controlled locations and is deleted at the end of the engagement or on request. A mutual NDA is available before anything sensitive is discussed, and findings are published or referenced only with written permission.

This website itself follows the same standard: the forms collect only what is needed to reply, submissions are validated and rate-limited server-side, analytics is consent-gated and receives no personal data, and the privacy notice describes exactly what is stored and for how long.

Security by background, not only by policy

The people handling your material have Experience of leading incident-response and application-security programmes for business systems handling millions of transactions.. The practices above are the ones we have applied to systems we were accountable for. Writing on AI, security workshops, university partnerships, published public guidance on databreaches, and participation in security focused events.

Availability and contact

India, the United Kingdom and the United States, remote-first. India (IST). The fastest route is a direct enquiry — or discuss a workflow assessment.