12 Specialized Domains

Each domain represents a specialized area of security testing with dedicated strategies and tools.

AutoNo approval needed
ConfirmQuick approval
ReviewDetailed review
BlockNever executed
🌐CONFIRM

Network Infrastructure

Port scanning, service enumeration, network mapping

πŸ•ΈοΈCONFIRM

Web Application

OWASP testing, injection attacks, authentication bypass

πŸ—„οΈREVIEW

Database Security

SQL injection, data extraction, privilege escalation

🏒REVIEW

Active Directory

Kerberos attacks, LDAP enumeration, domain dominance

πŸ“§CONFIRM

Email Services

SMTP testing, user enumeration, phishing vectors

πŸ”ŒREVIEW

Remote Access

SSH, RDP, VNC security testing

πŸ“CONFIRM

File Sharing

SMB, NFS, FTP enumeration and exploitation

☁️REVIEW

Cloud Infrastructure

AWS, Azure, GCP misconfiguration detection

πŸ“¦REVIEW

Container Systems

Docker, Kubernetes security assessment

πŸ”—CONFIRM

API Security

REST, GraphQL, SOAP endpoint testing

πŸ“‘REVIEW

Wireless Networks

WiFi and Bluetooth security testing

🏭BLOCK

Industrial Systems

Critical infrastructure - BLOCKED by design

⚠️ Industrial Systems (ICS)

Industrial Control Systems are permanently blocked. The agent will never execute any action against critical infrastructure including Modbus, DNP3, ENIP protocols. Safety is non-negotiable.