Try to Break the Bot

Go ahead. Hit it.

Try prompt injection, fake authority, private-data requests, impossible bookings, stale policies, and anything else you think could make a business chatbot go off the rails. Bridge is really answering through the same Cloudflare AI runtime used by MethodMade's Concierge, but the safety-critical decisions do not belong to the model.

Need ammunition?

Choose a guided attack, then send it to Bridge.

Scenario rules
Fictional demo business These are not MethodMade Studio's real hours, pricing, or Amber's availability.

Nothing in this demo can book time with Amber or create a real payment, refund, dispatch, or work-order change.

  • HoursMonday-Friday 8 AM-6 PM; Saturday 9 AM-2 PM.
  • Consultation$75 in the current scenario. An archived 2025 record shows $50.
  • SchedulingBookings must be inside scenario hours and availability must be verified first.
  • ChangesCancellation or rescheduling requires at least 24 hours notice.
  • Human authorityBridge cannot approve discounts, refunds, guarantees, final quotes, payment status, or completion status.
  • PrivacyPrivate customer records and staff-only notes stay restricted.
What this tests
Select a guided attack

The prompt preview and guardrail category will appear here. Nothing runs until you press Send in the chat.

MethodMade AI Concierge

Bridge · demo instance

Ready
Ready Standing by

Bridge is relaxed and attentive until there is an actual request to evaluate.

Bridge

Try me. Ask a normal question or try to make me violate a rule. The other panels will show what happens before I answer.

Demo input goes to a same-origin Cloudflare Function for evaluation. Blocked raw attack text is not forwarded into Bridge's model context.

Deterministic safety layer

Guardrail Monitor

Standing by
Instruction boundaryVisitor text cannot rewrite system rules.
Ready
Privacy + accessCustomer scope cannot reach private records.
Ready
AuthorizationDiscounts, refunds, and commitments have explicit limits.
Ready
Business rulesHours, pricing, workflow constraints, and validation still apply.
Ready
GroundingFacts must come from an allowed authoritative source.
Ready
Human handoffJudgment and exceptions stop at the right boundary.
Ready
What just happenedlive

Run a challenge to see the decision path.

Before Bridge gets context

Retrieval + Authority

Ready
RequestScopeRetrieveAuthorityBridge
Waiting for a question

Restricted sources stay outside Bridge's context. Current sources outrank archived ones.

Synthetic knowledge base
  • Public · current Service Menu + Pricing
  • Public · current Business Hours
  • Public · current Cancellation Policy
  • Public · current Refund Policy
  • Public · archived 2025 Service Menu
  • Internal · restricted Staff Operations Handbook
  • Private · restricted Customer Account Notes

Attack report

So far, the business rules are still standing.

The target is not maximum refusals. A useful system allows safe requests, blocks unsafe actions, grounds facts, and escalates the gray area.

0attempts
0prompt overrides blocked
0privacy attempts blocked
0unauthorized actions prevented
0safe escalations
0business rules violated

What you are actually testing

Bridge is one piece of the system, not the whole system.

Deterministic gate

Classifies permissions and business-rule boundaries before conversational AI can influence the decision.

Scoped retrieval

Only allowed sources can become model context; stale sources can be detected without silently winning.

Bridge

The real MethodMade Concierge runtime turns the safe decision packet into a natural customer-facing response.

Human authority

Money, guarantees, exceptions, and genuine judgment stay with an authorized person.

Keep exploring

See another handoff in action.

Different problem, same idea: make the work visible, connect the handoffs, and keep judgment with a person when it matters.

View all 17 demos
Next up in the showroomAI Receptionist

AI Receptionist + Booking

Turn a clear incoming request into service identification, availability, booking, confirmation, and a visible audit trail.

Open next demo
Shows
Intakeschedulingroutingconfirmation
Browse the showroomSwipe, drag, use ← →, or tab into a card.
1 / 16
AI Receptionist

AI Receptionist + Booking

Turn a clear incoming request into service identification, availability, booking, confirmation, and a visible audit trail.

AI Receptionist

AI Receptionist: Fully Booked + Waitlist

Recover from a genuinely full calendar by discovering flexibility, offering a real alternative, and preserving the preferred-time waitlist.

AI Receptionist

AI Receptionist: Reschedule + Duration Rules

Move an existing appointment safely while rejecting calendar gaps that cannot actually fit the service duration and buffer.

AI Receptionist

AI Receptionist: Complex Intake + Human Handoff

Ask targeted questions, recognize when routine booking reaches a staff-judgment boundary, preserve context, and resume after the human decision.

Spreadsheet Chaos

Spreadsheet Chaos: Payroll Cleanup

Turn messy texts, emails, photos, and notes into clean payroll records while uncertain entries stop for human review.

Spreadsheet Chaos

Spreadsheet Chaos: Job Costing Rollup

Reconcile time texts, vendor invoices, receipt photos, mileage, and change orders into one defensible project-cost view.

Spreadsheet Chaos

Spreadsheet Chaos: Inventory + Vendor Cleanup

Normalize POS, warehouse, vendor, pricing, and duplicate-SKU data into one controlled inventory update.

Spreadsheet Chaos

Spreadsheet Chaos: Multi-Location Reporting

Turn incompatible location spreadsheets into one KPI packet while recovering missing facts and separating math from interpretation.

Customer experience

Website Concierge + Support

Answer common questions, understand what a visitor needs, surface the right information, and escalate when the request needs a person.

Sales

Lead Intake + Qualification

Capture a new lead, organize the useful context, apply clear qualification rules, and hand the right opportunities into a sales queue.

Sales + operations

Quote + Estimate Workflow

Move a customer request through scope questions, required details, estimate preparation, approval, and follow-up without retyping everything.

Field operations

Job Dispatch + Work Orders

Turn service requests into work orders, detect missing route-critical details, ask the customer for what is missing, and continue dispatch once the reply arrives.

Back office

Invoice + Payment Reconciliation

Match invoices, payments, and reference numbers automatically while mismatches land in a small exception queue for review.

Customer retention

Customer Follow-Up Engine

Trigger the right reminder or follow-up after an appointment, estimate, service visit, or unanswered request — with explicit stop rules.

Sales

Sales Discovery + CRM Handoff

Guide an interested prospect through practical discovery, capture what matters, identify fit, and prepare a clean human handoff.

Internal operations

Employee Onboarding + Internal Ops

Coordinate forms, tasks, access requests, training steps, and missing-item follow-up so onboarding does not live in one person’s memory.