Mission control
A live view of scope, execution state, evidence, and release decisions across your authorized work.
What needs attention
Findings posture
Automation moves quickly. Authorization moves first.
Every job is bound to an organization, engagement, runner, approved window, and reviewable evidence trail. The browser never receives customer secrets or executes attack tools.
Set the operating boundary.
Complete this once per workspace. Do not upload credentials or live target secrets here.
Define the mission before the tools move.
Scope, exclusions, windows, contacts, and evidence expectations stay attached to the engagement.
Request a governed run.
Jobs remain drafts until the engagement is approved and a runner is available.
Release what has been reviewed.
Executive and technical outputs are shown only after the release state is set by an authorized reviewer.
Keep execution close to private assets.
The portal manages enrollment and metadata. The runner performs work locally and communicates outbound only through the control plane contract.
Give people the least access they need.
Roles separate operators, reviewers, billing owners, analysts, and read-only observers.
Plans, entitlements, and invoices.
Checkout and billing management open only for authorized billing roles. Prices are configured in Stripe, not hard-coded in the browser.
Defined surface. Defensible output.
Fixed-duration discovery with executive and technical reports.
Contact salesRecurring validation.
Customer runner, retesting, evidence history, and support.
Private operating controls.
Custom deployment, procurement, and security review.
Contact salesOperate the service without weakening tenant boundaries.
Platform administration is a separate role. Never share a password or service key through this portal.
Secure account setup
Create your own account with Supabase Auth, enable MFA, then set is_platform_admin for that user through the protected Supabase SQL editor or an approved admin workflow. This portal never creates or displays an admin password.
update public.profiles set is_platform_admin = true where id = '<your-auth-user-id>';