CASEEnter console
Harvard DCE Cybersecurity Capstone 2026

Is there a hidden AI supply chain in your vendor?

CASE (Critical AI Sovereignty Evaluators) scores how much control you've handed to a vendor's AI, the model, the data, what it creates from that data, who's watching it, and how many companies are really in the chain. Every rating traces to a published, hand-reproducible CVSS 4.0 formula.

Whose AI brain is this, really?What are we feeding it?What does it create from our data?Who's deciding what the AI sees and does?Which humans are actually looking at our stuff?Who's holding the steering wheel?How many companies are really in this chain?

Run a reference case

10 synthetic vendors, expert-reviewed readings

Two per industry, financial services, healthcare, aerospace & defense, Fortune 500, generic business. Pick one and watch the pipeline assess it live.

Explore the taxonomy map

7 questions, 29 technical dimensions

The seven plain-language hazard classes as an outer ring, with the dimensions that carry each one revealed on expand.

Assess your own vendor

22-question baseline questionnaire

Describe the AI dependency and answer the baseline. Retrieval-grounded agents classify it; deterministic code scores every metric.