Adversarial Playbooks & Visual Motion Flight Deck
Explore the assessment workflow through interactive graphics, sample radar views and optional voice briefings. All scenarios use illustrative data; no tests are executed on this page.
NOT EXECUTED — this page explains the assessment workflow with illustrative data. No scan has been run against any system, no finding is claimed, and the digests shown are samples.
Broken Object-Level Authorization (BOLA/IDOR) & Closure Proof
Walkthrough of API tenant-isolation failure and its verified closure path
- Recon
- Weaponize
- Execute
- Verify
- Close
RECON · Target Discovery & Schema Introspection
ILLUSTRATIVE DEMOSTAGE 01Stage 1 of 5 · illustrative topology
Kong / Envoy reverse proxy (sample topology).
Briefing transcript
Sample audio · not a live narrationStage one: the engine introspects the API schema, mapping routes without generating destructive volume.
Voice briefing (sample audio)OPTIONAL NARRATION
Voice: Rachel • Executive Security Briefing
“Stage one: the engine introspects the API schema, mapping routes without generating destructive volume.”
Target Discovery & Schema Introspection
Passive OpenAPI endpoint discovery identifying unmapped parameters in tenant exchange endpoints.
curl -s -i "https://api.pentriarch-demo.internal/v2/openapi.json" -H "Accept: application/json"HTTP/2 200 OK
Content-Type: application/json
{"paths":{"/v2/organizations/{orgId}/billing":{"get":{"parameters":[{"name":"orgId","in":"path"}]}}}}Shape a playbook around your stack
Builds a playbook template locally — no model is called and nothing is executed. Signed-in users can additionally request an AI draft, which is validated before it is shown and always labelled illustrative.