Introducing Factory Wargames
Test your defenses against a nation-state level attack.
We'll simulate the attack and cover the cost. Apply, and if selected, we'll run the simulation, share our learnings, and Droids will help with the fix for free.
How it works
01Apply
Tell us about your organization.
02Review
We verify every applicant before selecting.
03Agreement
Scope and rules agreed in writing.
04Simulation
Run in scope. You can stop it anytime.
05Fixes
We share findings. Droids help fix.
Your systems only
Only systems your organization owns or controls are in scope. Third-party systems, vendors, and shared infrastructure are excluded unless their owner also authorizes it in writing.
Agreed scope and window
Targets, techniques, and timing are listed in the written agreement. Anything not listed is out of scope.
No disruption by default
Denial of service, data destruction, and other techniques that could disrupt production are excluded unless both sides agree to them in writing.
Findings shared with you
We share the findings with your organization, and Droids help with the fix.
Security at Factory
Built for organizations that cannot compromise on security.
Factory runs inside security-conscious enterprises, from global financial firms to frontier AI labs. The controls that protect their code protect yours.
- SOC 2
- GDPR
- ISO 42001
- CCPA
Reports and certificates are available in the Trust Center.
“It was absolutely critical to ensure that agents ran inside of our data center, under our control, underneath our observation.”
Runs where you decide
Factory Private runs Droid sandboxes in your VPC through OpenCompute, under your own IAM, network, and security controls. Custom deployments run fully air-gapped, with no requests to Factory services.
Read moreYour code is not training data
We do not train on your code. Droid reads files where it runs and keeps no copy of your repository in Factory cloud.
Read moreYour models, your contracts
Factory is model-independent. Use enterprise endpoints with zero data retention contracts, your own LLM gateway, or self-hosted models.
Read moreSecurity review on every PR
Droid runs a STRIDE-based security review on pull requests, with severity, CWE reference, and a suggested fix. It has surfaced vulnerabilities in widely used open source, including CVE-2026-42876.
Read moreSecrets stay out of commits
Droid Shield scans autonomous commits and pushes for secrets before they leave the machine. Its detection models are open-weight, so anyone can inspect them.
Read moreSecurity built in the open
Factory is a member of the Open Secure AI Alliance with NVIDIA, building and sharing open tools for securing software and AI agents.
Read more
Match the attackers’ pace on the defender side.
Apply to be considered for Factory Wargames.
Factory Wargames participants are selected after review, not at random, and applying does not guarantee selection. Apply here and we will be in touch if your organization is selected; not every applicant is selected. Applying does not authorize Factory to access or test any system; each engagement runs only under a separate written agreement that sets the scope and rules of engagement. By applying, you consent to Factory storing your details to evaluate your application and contacting you regarding the Factory Wargames program and related Factory security services. Factory may change or end the program at any time. See our Privacy Policy.
