Getting started
Introduction
What Opsec is, what it does and how the pieces fit together.
Opsec is a self-hosted vulnerability intelligence platform. Specialized SI security agents analyze your code, smart contracts, web applications and infrastructure, confirm which issues are exploitable, and generate repairs your engineers can review and merge.
Core concepts
| Concept | Description |
|---|---|
| Source | A repository, contract deployment or cloud account Opsec is allowed to read. |
| Agent | A domain-specific analyzer: code, smart contract, PHP & web or infrastructure. |
| Finding | An issue an agent has confirmed with a working exploit path in a replica. |
| Repair | A minimal patch, tested against your suite, delivered as a pull request. |
| Replica | An isolated, disposable copy of the affected system used for validation. |
How a finding is produced
- An agent maps the attack surface of a source and proposes candidate issues.
- Each candidate is reproduced against a replica. Candidates that cannot be exploited are discarded.
- Confirmed findings are ranked by exploitability and sent to your queue.
- Opsec writes a repair, runs your tests and opens a pull request with its reasoning.