Using Opsec
Exploit validation
How Opsec proves an issue is real before reporting it.
Validation is what separates an Opsec finding from a scanner alert. Each candidate issue is reproduced against a disposable replica, and only issues with a working exploit are reported.
| Domain | Replica |
|---|---|
| Code & application | Service built from your build definition with synthetic data |
| Smart contracts | Fork of the target chain at a recent block |
| PHP & web | Application stack pinned to production versions |
| Infrastructure | Policy simulation over a graph of your account |