Account Start a project
What we build

Custom AI and software for your product or operations, from a first prototype to a system your team runs.

Start a project
How a project runsDescribe, plan, build, hand over

Four steps, a written plan and a fixed price within days.
Subscriptions

Ready-made workspaces by monthly subscription. Try free, cancel any time from your account.

See plans
No account firstPay, and you are in

Your account is created when you subscribe.
Open research

Reports, guides and methods on how AI can fail, free to cite.

All publications
Latest · 10 Oct 2026Coding agents that deleted production data

Two reported cases, in July 2025 and April 2026, in which an AI coding agent destroyed live data, and what they teach about permissions and backups.
Live AI risk

Automated probes, outage data and public reports, reviewed by a person.

Open the monitor
AI risk nowLevel 1 · Calm

6 systems, 2 regions, 0 reports in 24 h.
Before it fails

What to do in the first 72 hours if AI-dependent services fail.

Read the guides
Offline kitSave it now

Guides and data to keep when the internet is down.

TOSWO

Privacy

What this site collects, what it does not, and how long it keeps it.

Short version: reading this site collects almost nothing about you. Sending a report collects what you type and little else.

Reading the site

  • There are no advertising or analytics trackers and no third-party scripts on these pages.
  • The site sets no cookies for visitors. Your light or dark choice is saved in your own browser's storage and never sent to us.
  • Our traffic passes through Cloudflare, which sees your network address and request details in order to deliver and protect the site, under its own privacy policy.
  • Our servers keep short-lived technical logs to find faults and block abuse. Network addresses and cookies are redacted from them.

Sending a report

What we store: the category, the system you name, your description, the evidence links you add, the country your request came from (to show where reports cluster), and a salted one-way hash of your network address. The hash lets us notice a flood of reports from one source and judge reliability over time. It cannot be turned back into your address.

If you choose to give an email or other contact, we store it only to ask follow-up questions, and only if you left "send anonymously" off. Anonymous reports store no contact.

Reports are visible only to TOSWO researchers. Published events never include a reporter's identity.

How long we keep it

  • Automated probe results: 30 days, then deleted. Summaries (status history, events) stay, because they are the public record.
  • Reports: kept for as long as they are useful to the record. You can ask us to delete yours (quote your tracking code) and we will, unless it is already part of a published event, in which case we remove everything that could identify you.

Staff accounts

The people who run the site sign in with a work email address, a password and a second factor. We keep their names, email addresses and an audit log of what they changed.

Your choices

Write to [email protected] to ask what we hold about you, to correct it or to have it deleted. Where the law gives you rights over your data, they apply here.

Changes

When this page changes, the date below changes with it. Material changes are noted on the corrections page.