Safe by design.
Saluki runs against production every day. These are the rules it runs by.
Scoped by youNon-destructive by defaultFully auditable
Rules of engagement
You define the scope, the testing windows and the pace. The platform enforces them on every action, and refuses anything outside them. Changes to scope are logged and take effect immediately.
- Scope3 domains, 2 ranges
- Window22:00 to 06:00 UTC
- PaceLow
Non-destructive testing
Pursuit reads, compares and reproduces. It never changes a record, never runs a destructive payload, and rate-limits itself against your systems. Operators follow the same rules.
Audit and evidence
Every action, automated or human, is logged with its evidence. You can show your auditors exactly what was tested, when, and how.
14:02:11pursuitGET /adminvpn-02200evidence saved
Access and data
Single sign-on and role-based access control. Data encrypted in transit and at rest. Regional hosting options and configurable retention, so your evidence lives where you need it, for as long as you need it.
Responsible disclosure
If you believe you have found a security issue in Saluki itself, we want to hear about it. Use the contact form and we will reply quickly and treat your report with care.
Enterprise access
Single sign-on, role-based access, API access and regional hosting options.
- SSO
- RBAC
- API
- Regional hosting