01
Defined assessment scope
Begin with a target and an objective so the assessment has a clear question to investigate.
Red Agent
Investigate the target.
Verify the impact.
Red Agent runs security assessments against your live target on demand and reports only what it can prove, with the evidence attached.
Scoped to your targets and assessment cadence. Talk to sales for a plan.
Red AgentWorkflow illustration
For the team asking what an attacker can do
Turn a candidate weakness into a supported finding.
Start with a running target and a defined objective. Red Agent investigates candidate paths, then independently verifies the observed behavior before confirming a finding.
Red Agent tests your running target whenever you need it and records a finding only after it has independently confirmed it — so what you see is proof, not a list of maybes.
- Assessment scope
- A running target & an objective
- When to use it
- When you need to test real behavior
- What you receive
- Verified findings & observed evidence
Purpose-built capabilities
From an assessment objective to verified evidence.
Start with a target and a clear objective. Follow specialist investigations, independently verify candidate weaknesses, and give your team findings supported by observed evidence.
02
Specialist investigation
Use specialist agents to investigate potential weaknesses and refine candidate attack paths.
03
Independent verification
Separate a potential weakness from a confirmed finding by checking the observed behavior.
04
Evidence per finding
Record the evidence that supports the reported impact, so the team can evaluate what happened.
05
Run activity
Follow the assessment as it progresses and understand what the agents are investigating.
06
Confirmed findings
Review the confirmed results and use their evidence to plan the next remediation step.
Follow the investigation
Inside a live target assessment
Ask a specific security question
Give the assessment a clear target and goal. A defined objective helps keep the investigation focused on the behavior you need to understand.
- Explicit target
- Assessment objective
- Scoped investigation
Target
An application API in assessment scope
Objective
Investigate cross-account data exposure
Approach
Explore candidate access paths
Output
Evidence for verified findings
Evidence before confirmation
Review what was observed and why it supports the finding. The assessment activity and verification evidence give your team the context for a remediation decision.
Example scenario
An assessment investigates whether a scoped API exposes data beyond the access intended for a user.
Independent verification records the observed behavior before it becomes a confirmed finding.
Get started
From setup to a useful result.
- 01
Scope
Define the target and the objective for your assessment.
- 02
Investigate
Specialist agents explore the target and refine potential attack paths.
- 03
Verify
Potential findings undergo independent verification to establish proof.
- 04
Report
Confirmed findings appear with evidence so your team can understand and address the impact.
Plan your coverage
Start with Red Agent.
Custom
Scoped to targets and assessment cadence
Scoped to your targets and assessment cadence. Talk to sales for a plan.
How is Red Agent priced?
Red Agent uses custom pricing based on target scope and assessment cadence. Contact our team to define the assessment and receive a quote.
What becomes a confirmed finding?
A candidate weakness must undergo independent verification and have supporting evidence before it is recorded as a confirmed finding.
How is this different from Whitebox?
Whitebox investigates source code across a repository. Red Agent investigates a running target against a defined assessment objective.
Your next security question