Autonomous security research

An engine that hunts. Evidence that convicts.

Isolated sandbox per audit. Local-first AI fleet. Nine validation gates. A finding ships with its proof — or it doesn't ship.

CASE FILE · 9f3ac21eEXECUTING
systembf auto target — sandbox 9f3ac21e provisionedfirecracker microvm
statusrecon: 214 subdomains · 87 live hosts · 2,341 urlswave 1-5 ok
probeGET /api/invoices/:id — foreign-org token acceptedcwe-639
 
22
Hunting agents
90
Security tools
9
Validation gates
7
Recon waves
The lifecycle

Not a scan. A research discipline.

Every target moves through the same pipeline. Every stage leaves durable state the next hunt inherits.

TARGET→
AUDIT→
SCAN→
ANALYSIS→
FINDING→
EVIDENCE→
VERIFICATION→
MEMORY→
TARGET→
AUDIT→
SCAN→
ANALYSIS→
FINDING→
EVIDENCE→
VERIFICATION→
MEMORY→
The platform

A security research execution system.

Not an AI that scans websites. An execution environment where the research lifecycle runs itself — under your policy, on your keys.

01

Isolated by construction

One Firecracker microVM per audit. Your keys, your target, your data — destroyed at session TTL. No shared infrastructure between tenants.

FIRECRACKER · PER SESSION
02

Local-first execution

AI runtime policy defaults to a local model fleet. Cloud stays as an emergency failover tier. The substrate is policy — measured, not assumed.

LOCAL FLEET · CLOUD FAILOVER
03

Verified or nothing

Nine gates between a lead and a claim: differential probes, PoC replay, LLM second opinion. Unverified findings get demoted — never shipped as fact.

9 GATES · REPLAY OR DEMOTE
04

It remembers the terrain

Yield memory persists per target type across hunts. Barren domains are demoted, never forgotten. Verdicts decay — stale evidence can’t veto current reality.

CROSS-HUNT MEMORY · DECAYING
Proof, not noise

The finding isn't the claim. The evidence is.

Every finding is a case file: the probe that surfaced it, the replay that reproduced it, the gates that convicted it. Reports that survive triage — CVSS, CWE, PoC files, remediation.

FINDING TRACE · END TO END
DISCOVERcrawl surfaced /api/invoices/:id — no org scoping in response delta
PROBEdifferential request with foreign org token — 200 vs baseline 403
REPLAYPoC re-executed 3/3 — payload, capture, jq assertion
VERDICTconfirmed by gate pipeline · llm second opinion concurred
How it runs
01

Recon

90 tools across a dependency-derived wave DAG. Cheap waves gate the heavy ones.

02

Hunt

Agents spawn per vulnerability class, execute real commands, coordinate through a shared case file.

03

Verify

Differential probes and PoC replay confirm or kill. What can’t reproduce never reaches you.

04

Report

H1-ready submissions: CVSS, CWE, PoC files, remediation. Download, review, submit.

Point it at a target.

Free tier · 3 audits/mo · isolated sandbox · verified findings