Skip to main content
Cyber is the module where Oliver, the Security Engineer agent, runs pentests — penetration tests, simulated attacks that prove real vulnerabilities (see the glossary) — against your running apps. Each app is a living record: every scan updates one picture of its security instead of producing another one-off report.
Cyber is in beta. Find it under Cyber in the navigation menu.
A traditional pentest is a snapshot: a consultant tests once a year and leaves a PDF that starts aging the day it lands. Oliver keeps testing — every run refreshes the app’s reachable surface, re-checks old findings, and proves new ones with evidence you can replay yourself. When something is fixed, the next scan verifies the fix without being asked, so your security picture stays as current as your last deploy.

​
How it works

  1. Register an app. Give it a name and a target — a domain or an API base URL — then prove you own the domain with a DNS record.
  2. Set the boundaries. Fence off what Oliver may test, attach logins so he can test behind the sign-in page, and attach repositories so findings point at the exact line of code.
  3. Oliver scans. A run maps everything reachable, then tests inside your scope at the intensity you chose — from read-only to full.
  4. Findings arrive with proof. Each confirmed finding carries the attack path and a safe proof of concept you can replay yourself.
  5. The next scan re-checks. Fixed findings are verified automatically, retest requests are honored, and dismissed findings stay quiet.
Cyber landing page showing the pentest pipeline from app registration to verified findings

​
What you can do

The Cyber page itself is your workspace posture view. It totals open findings by severity across every app, flags what needs attention — critical and high open, needs triage, awaiting retest — and lists recent findings above the app roster. Until an app’s first scan completes, Cyber shows “not scanned yet” rather than a clean bill of health, and while a scan runs the counts carry a live indicator because they can still change.

​
Key concepts

​
Get started

Run a pentest

Register your first app, set the boundaries, and launch a scan

Triage security findings

Read each finding’s proof and move it through your workflow

Oliver

Meet the Security Engineer agent that runs your pentests

Connections

Connect the Git provider that unlocks white-box testing