
Framework
Built around MITRE ATT&CK
Every check is a technique ID. Every pack follows public adversary reporting.
- T1059.001Technique IDs on every checkNamed like the product UI — not vague marketing labels.
- G0016APT packs from public reportingStages follow tactics: Execution → Persistence → Credential Access.
- PASS / FAILKill-chain pathway gradingPass = defense blocked the probe. Fail = technique succeeded live.
- DOCSSecurity docs per techniqueHarden-and-detect guidance keyed to the same ATT&CK IDs. Browse the catalog.
Product
From host package to harden guidance
Deliver the agent, grade the pathway, then open the same technique for detection and remediation.


Engagement
How an engagement runs
Four moves from assessment create to live grading.
- 1CreateFree: 1 assessment. Intermediate: 2/30d. Advanced: 4/30d.
- 2Choose chain5 starter APTs on Free. Full catalog + custom chains on paid.
- 3Deliver agentDownload or magic link. Active window gates auth.
- 4Grade liveEvidence streams in. Paid plans can export PDF.
Get started
Start with a baseline. Expand when you need depth.
Free for one run. Intermediate and Advanced unlock the full catalog, retests, and AI verification.