Methodology

How authorized assessment works — without disclosing exploits.

A public description of architecture and process. No payloads, no weaponized PoCs — only what experts use to judge program quality.

Foundations

Versioned RoE: host scope, time windows, allowed techniques, escalation contacts. Nothing runs outside RoE.

Operators attest authorization before deep scans. RoE hash + target set land in the ledger.

Signals from nuclei/nmap/httpx/ffuf and ASVS layers — no malware generators and no DoS.

Evidence ZIP packs, tool versions, env hash, CVSS 4.0 / EPSS / KEV, STIX and ATT&CK Navigator export.

Layers: Doctrine → Mission OS → Recon/ASM → Assessment → Operator desk → Cyber intel → Reporting.