This server helps financial entities plan, document, and attest Threat-Led Penetration Testing (TLPT) programs as required by DORA Article 26, following the TIBER-EU framework. Key capabilities include:

• Scope a TLPT Engagement: Generate a structured DORA Article 26 TLPT scope document, including phase plans, deliverables, RACI matrix, and budget breakdown — supporting entity types such as credit institutions, investment firms, insurers, CCPs, and more.

• Generate a Targeted Threat Intelligence (TTI) Brief: Produce a TTI brief template aligned to ECB TIBER-EU v2.0 standards, covering sector-specific threat modelling, geographic footprint, and critical functions.

• Plan Remediation Milestones: Create a 90/180/365-day remediation milestone plan based on red-team findings, with closure timelines mapped to finding severity (critical, high, medium, low).

• Issue a Signed TLPT Attestation: Generate an HMAC-signed compliance attestation for a TLPT engagement (preparation, testing, or closure phase), including a verification URL.

• List TIBER-EU TLPT Phases: Retrieve a summary of the three TIBER-EU TLPT phases and their required deliverables.

• View Pricing: Get pricing information for the MEOK DORA TLPT Planner service.

The server also has built-in EU AI Act compliance, covering risk management, transparency, bias detection, and AI content watermarking.