One engine, four surfaces —
from autonomous testing to verified proof.

Autonomous repository security analysis with live SSE progression, honest degradation, and spend governance.

• ▸Least-privilege GitHub App acquisition with exact commit SHA targeting
• ▸Sequential live SSE stages: ORACLE → CORTEX → HYDRA → WEAVER → SCRIBE
• ▸Durable reports in Markdown, JSON, and SARIF 2.1.0 with commit-level rescan deltas
• ▸Per-tenant spend caps ($5/scan, $25/day, $200/month) and concurrency gates

WEAVER attack-path correlation, chain-aware APPS scoring, and CyberVaR risk quantification (Designed capability).

• ▸Connects isolated findings into actionable multi-step exploit sequences
• ▸Chain-aware APPS scoring: P(path) × impact × business context
• ▸EPSS vulnerability intelligence and MITRE ATT&CK matrix correlation
• ▸CyberVaR FAIR-methodology financial loss modeling (designed capability)

Hardware-isolated exploit reproduction in dual-layer gVisor and Firecracker micro-VM sandboxes.

• ▸Ephemeral micro-VM environments with ~125ms boot times and instant teardown
• ▸Kernel isolation, host-level iptables, and in-scope network egress policy
• ▸YARA command scanning and external Redis/PostgreSQL-backed kill switches
• ▸BAS campaigns & detection-gap heatmaps (Designed — on the roadmap)

Evidence-backed compliance exports with immutable audit trail and verifiable multi-store deletion.

• ▸Cryptographically bound findings with exact code references and suggested fixes
• ▸Immutable action ledger verifying every execution decision and approval gate
• ▸Configurable data retention (30d default) and verified transactional deletion
• ▸Framework control mapping to SOC 2, ISO 27001, and DORA (Roadmap)