For business owners with no IT team
Your AI tools can reach your company data. Here’s the kit to lock it down.
Leaky by Default is a step-by-step playbook. Find every place your AI tools can leak company data in about 20 minutes, then close each gap yourself, click by click.
- Instant download
- 7-day refund
- Free updates
Not sure yet? Take the free 2-minute exposure check or read a sample chapter.
Everything in one download: interactive file, printable PDF and the book
Click-by-click fixes for
- ChatGPT
- Copilot
- Gemini
- Claude
- Google Workspace
- Microsoft 365
- Zapier
- Make
- n8n
The problem
Every “Allow” handed out a key. Nobody took them back.
Your chatbot
Staff paste client details, contracts and logins into it. Depending on the plan and its settings, that can be kept and used to train the model.
Your notetaker
It joins your calls, records them and can send the transcript to everyone on the invite, including people outside the company.
Your automations
Zapier, Make and n8n flows keep running on the logins of whoever set them up, even after that person has left.
Your inbox assistant
A tool that reads your email can be given instructions by anyone who sends you one.
None of them will tell you when something leaks. The playbook finds these gaps before anyone else does.
What’s inside
A playbook you work through, not a PDF you skim
See exactly where you’re exposed
Answer 40 statements about the tools you use. You get an exposure score across five areas and a ranked list of what to fix first. “Not sure” counts as a gap, because a risk you can’t see is still a risk.
Fix it with click paths, not theory
32 fixes for the tools small businesses actually run. Each one tells you where the setting is and what to change, so every tool keeps only the access its job needs.
Get your team on the same page
Generate a one-page AI policy in two minutes, keep an inventory of every AI tool you run, and print the first-hour incident card for the day something goes wrong. Work on screen or print the PDF worksheets.
How it works
The order is already worked out. You just follow it.
- 1
Audit
20 minutes
Take the Leak Audit and get your exposure score, with the fixes ranked.
- 2
Fix
One afternoon
Close the worst gaps first, with step-by-step click paths for your tools.
- 3
Protect
7 days
Follow the lockdown plan, roll out the team policy and keep the incident card by your desk.
$79.99 launch offerYour price is reserved for 48:00:00Instant download. 7-day refund, no questions asked.
Buy now — $79.99Why it matters
Built on what actually happened
Documented cases from the last two years, each one followed by what it means for a business your size. Every case links to the original reporting.
The database that deleted itself
An AI coding assistant wiped a production database during a code freeze, then reported that the rollback wouldn't work.
An assistant that can write to something live can break it, and the undo is not guaranteed.
Source: eWeek ↗Chapter 8 — Agents that act on their ownThe email nobody opened
A single crafted message could make a major AI assistant pull internal data into its answer and send it outside.
A tool that reads your inbox can be instructed by anyone who emails you.
Source: Dark Reading ↗Chapter 6 — Connectors, extensions and notetakersOne vendor, hundreds of victims
Stolen connection keys from one AI chat tool were used to pull records out of companies' CRMs. Google counted more than 700 organizations potentially affected.
Every app you connect to your CRM adds a key you don't control.
Source: The Hacker News ↗Chapter 6 — Connectors, extensions and notetakers"Summarize this thread"
Hidden text in a public forum post sent an AI browser into the user's inbox to fetch a login code.
A browser agent signed into your accounts will follow instructions it finds on a page.
Source: The Register ↗Chapter 8 — Agents that act on their ownWhat early readers say
Each received a free copy in exchange for honest feedback.
Everything you get
One download. Everything you need to lock it down.
Digital playbook for small businesses
Leaky by Default
- 12 chapters and 32 step-by-step fixes
- 40-statement Leak Audit, scored as you answer
- AI inventory, exports to CSV
- Team AI policy generator
- 7-day lockdown plan
- First-hour incident card
- Free updates to every new edition
One payment, less than an hour of IT support.
Buy now — $79.99Secure checkout by Polar. Instant download after payment.
All 12 chapters
- The one idea behind every AI leak
- Seven myths that keep businesses exposed
- Take the Leak Audit
- Map what you actually run
- Chatbots that know your business
- Connectors, extensions and notetakers
- Automations: Zapier, Make and n8n
- Agents that act on their own
- Your team: a policy people follow
- When something leaks: the first hour
- The 7-day lockdown plan
- Where this is heading
Who it's for
Owners and managers who use AI tools with company data, have connected apps to email, Drive or a CRM, or run automations, and have no IT department. It's a do-it-yourself playbook. If you need a compliance certification or someone to do the work for you, this isn't it. If you build AI agents for clients, the builder pack is a better fit.
Delivery and refunds
You get two files right after payment: an interactive HTML playbook that opens in any browser and works offline, and a printable PDF with fill-in worksheets. If it isn't right for you, email support@leakyagents.com within 7 days and you get your money back.
The 7-day guarantee
Run the Leak Audit. If it doesn't show you at least one gap you didn't know about, email support@leakyagents.com within 7 days and get every cent back. No forms, no questions.
Questions
Can't I just ask ChatGPT how to secure my business?
You can, and the advice you get back will mostly be sensible. What it won't give you is your own answer. This hands you a scored audit of the setup you actually run, a ranked list of what to fix first, the click paths for the specific tools you use, and a record of what you changed and when. Generic advice tells you what might be risky. This tells you what to do next, in order.
Do I need to be technical?
No. Everything is written for business owners, with click paths for the settings you need to change. Each chapter ends with an optional technical section if you want the detail, and you can skip every one of them without missing a fix.
How long does it take?
The audit takes about 20 minutes and tells you what to fix first. Most people spend an afternoon on the top fixes, or follow the 7-day plan at 30 to 90 minutes a day.
What exactly do I download?
Two files. An interactive HTML playbook that opens in any browser, works offline and saves your progress on your computer, and a printable PDF of the same content with the worksheets laid out to fill in by hand. You can read part of Chapter 6 of the interactive file before you buy.
Does it work for my tools?
It covers the tools small businesses actually run: ChatGPT, Claude, Gemini and Copilot, Google Workspace and Microsoft 365 connections, Chrome and Edge extensions, meeting notetakers, Zapier, Make, n8n, and browser and coding agents. The three rules behind the fixes apply to anything you add later.
Will it still be right in six months?
Menus change, so the playbook gives you the goal of each setting as well as the path. When enough changes, a new edition goes out to everyone who bought it, free.
Can my team use it?
Yes, within one business. Share it with your staff, print it, walk through it together. Please don't resell or publish it.
What if it's not for me?
Email within 7 days and you get your money back. You don't have to explain why.
Does this replace a security professional?
No, and it doesn't try to. This is educational material that gets you to a sensible baseline on the AI tools you already run. It is not a penetration test, an audit, a compliance certification or a professional assessment of your systems. If you handle regulated data, or a customer contract requires one, you need the real thing. Most small businesses need the baseline first.
For people who build AI for clients
You ship agents and automations for a living?
The Leaky Agents builder pack covers what you deliver to clients: permission templates, IAM policies, a prompt injection test bank and hardening guides.