01
For CISOs
One page that answers the board's question: what is hot, what changed, what is fixed.
Solutions
Built for the problems you actually have.
One platform, many ways in. Start where it hurts.
05 Use cases03 Teams
Continuous pentesting
An annual test tells you what was true for a week. Your surface changes every day.
How Saluki helps
- Pursuit tests hot exposures as they appear
- Every finding verified with evidence
- Operator review for critical findings
How Pursuit got here
PR-0917Verified- 22:14:0601ReconDiscovery
Mapped vpn-02 and enumerated the paths reachable from the public internet.
- 22:16:4102Sign inValid session
Authenticated as a standard VPN user with issued test credentials.
- 22:19:0903CompareAccess control
Compared the admin and user responses; the console rendered for both roles.
- 22:22:5304Cross boundaryPrivilege
Reached /admin without an administrator role and read tenant configuration.
- 22:27:3005VerifyReproduced
Reproduced the path three times from a clean session. No data changed.
Adversary emulation
You have vulnerabilities. The question is what a specific adversary would do with them.
How Saluki helps
- Intelligence-led scenarios mapped to MITRE ATT&CK
- Autonomous or operator-led campaigns
- Detection measured at every step
Operations
3 this monthLive- NightfallRed teamOP-204Brackwell Group · externalRunningAK62%22:00-06:00 UTC
- Harbour driftEmulation campaignOP-205Harbour Fleet · identityScheduledAK0%Starts 28 Oct
- Clear skiesRetest batchOP-198Cloud EU · 9 findingsCompleteRS100%Completed 24 Oct
Exposure validation
Scanners find thousands of things. Few of them matter.
How Saluki helps
- Heat ranks what is likely, reachable and costly
- Pursuit proves what is real
- Retest proves what is fixed
PR-0917CriticalAdmin panel reachable from the internetvpn-02.brackwell.example
Heat91Critical
- Critical90–100
- Hot70–89
- Warm40–69
- Cool0–39
Why it is critical
3 factors- Likelihood88Technique seen in the wild
- Reachability97Public internet, one hop
- Impact89Standard user → Administrator
Red team on demand
Sometimes you need the full operation: people, process and technology.
How Saluki helps
- Objective-based operations by senior operators
- Delivered and tracked inside the platform
- Purple-team debriefs and retest
Rules of engagement
Enforced- Scope3 domains, 2 ranges
- Window22:00-06:00 UTC
- PaceLow
- Non-destructiveOn · no data changed
Nightfall
RunningRed teamOP-204Progress62%
- Scope
- Brackwell Group · external
- Window
- 22:00-06:00 UTC
- Operator
- AK
Teams
- 02
For security operations
Fewer, better alerts. Verified findings with evidence, routed to the people who can act.
- 03
For offensive security teams
Let the platform run the loop, and spend your people on the work only people can do.
See it run against your estate.
One platform, many ways in. Start where it hurts.