01 · Continuous discovery
Sight
Give Saluki a name. It maps everything that name exposes: domains, cloud, certificates, services, identities. The map stays current as the estate changes.
03Platform / Pursuit
Attacks that prove it. Safely.
Automated red team operations against your real estate. Pursuit sets objectives, chains the steps a capable adversary would, stays inside the rules you set and documents every one.
01Automated red team operations
Set an objective. Pursuit goes after it.
Reach the admin console. Read another tenant's data. Cross from a supplier into the corporate estate. Pursuit takes objectives like these and works towards them the way a capable adversary would, chaining identity, cloud, web and, where in scope, people. Every operation runs inside your rules of engagement, and every step is recorded with its evidence.
- Recon
- Map what is reachable from the outside and pick the quietest route in
- Access
- Earn a foothold: a valid session, an exposed service, a supplier link
- Escalate
- Compare roles, cross boundaries, widen what the foothold can reach
- Objective
- Prove the objective was met, reproduce it, and stop
02Features
- 01
Real tradecraft
Pursuit chains the small steps a skilled operator would: sign in, map, compare, cross a boundary, reproduce. Mapped to MITRE ATT&CK.
- 02
Inside your rules
Scope, windows, pace and non-destructive testing are enforced by the platform on every action, and every action is logged.
- 03
Evidence, reviewed by an operator
Every finding carries the path, the request and the response, reproduced before it reaches you. A Saluki operator checks every critical finding first.
In the loop
Pursuit runs the Emulate step and hands verified findings with evidence to Resolve.
Specifications
Pursuit
Autonomous adversary emulation
- Targets
- Hot exposures from Signal, or any objective you set
- Safety
- Non-destructive, rate-limited, deconflicted, logged
- Evidence
- Path, request, response, reproduction
- Review
- Operator-reviewed for critical findings