Evaluris

Technical overview

How SPECTER Works

From defined scope to proof-backed attack paths and compliance-ready intelligence - a technical walkthrough for security engineers, CISOs, and compliance teams.

Operator view

Watch the attack path form in real time.

Discovery fans out across in-scope surfaces, the reasoning engine ranks a hot path, high-risk steps wait on the operator gate, and every decision lands in an immutable mission record.

MISSION msn-7f2a · EU-WEST · MODE standard

ELAPSED 00:00:18 · SCOPE locked

SCOPEmsn-7f2a · standard

Scope locked · mode=standard · gates armed

Demo output (English)

Pipeline

Mission pipeline steps

01

Discovery

Subdomains, ports, services, cloud resources, and AI/ML endpoints are enumerated within defined scope boundaries. Scope-validated, structured output - no manual tool invocation required.
02

Web & API Testing

OWASP WSTG-aligned authenticated testing across web applications and APIs. Hypothesis-to-validated finding workflows ensure every issue carries confirmed, business-impact context.
03

AI Attack-Path Reasoning

The reasoning engine correlates findings across all coverage domains, maps techniques to MITRE ATT&CK and MITRE ATLAS, and chains verified attack paths from initial access to critical assets.
04

Report Generation

Executive summary, risk score, verified findings with PoC evidence, MITRE mapping, remediation guidance, and compliance-ready export, aligned to DORA (Art. 25 & 26), NIS2, PCI DSS v4, ISO/IEC 27001, GDPR, TIBER-EU/TIBER-BE, and the EU AI Act.

Safety

Human Control. AI Speed.

SPECTER operates as your most capable offensive analyst - autonomous on scope, accountable on impact. High-risk actions require explicit operator authorization before execution. Every approval is logged, timestamped, and immutable.

Operator authorization required

Exploit execution
Credential use
Lateral movement
Payload delivery
Privilege escalation

Scope control modes

Passive

discovery and fingerprinting only

Standard

automated testing within scope

Aggressive

full exploit verification within scope boundaries

Scope rules

exclude IPs, paths, environments, or sensitive systems

Deployment

Deploy the way your security posture requires.

01

Managed

Evaluris-operated deployment. You define scope, objectives, and approval thresholds. We operate the platform and deliver findings. No infrastructure required on your side.
02

Private Deployment

Full SPECTER stack deployed in your environment - on-premise or private cloud. Your data never leaves your perimeter. Recommended for financial institutions, defense, and critical infrastructure operators.
03

Hybrid

Cloud orchestration with an on-site execution layer for air-gapped or segmented environments. Platform convenience with perimeter-enforced execution for the most sensitive deployments.

Integrations

Integration options

REST API for mission trigger and result retrieval
Webhooks for mission completion and critical findings
Scheduled missions - daily, weekly, or continuous
Compliance export - PDF, audit trail, regulatory evidence packages

Questions

FAQ

Ready to scope your first mission? Explore SPECTER Enterprise for regulated financial institutions or compare deployment models.

Deploy Your First MissionSPECTER Enterprise