Beyond scanning.
Into intelligent offensive security.
Define your scope. Follow every action.
Turn recorded evidence into a clearer picture of risk.
Security overview
Recorded evidenceAssessment history Findings per assessment
Findings by severity
Priority findings
Smarter testing.
Deeper insights.
A single workspace for your targets, assessment history, findings, and the actions behind them.
Start with a clear
boundary.
Organize applications and domains in one place. Set assessment budgets and limits, then check the scope before you start.
Explore assessmentsexample.invalidSee what happened.
And how.
Follow activity by actor role. Open an action to inspect its context and trace, from discovered endpoints to recorded test results.
Follow assessment activityRecorded /product.php and /search
GET /product.php → HTTP 200A finding is only
the beginning.
Review severity, CVSS, and weakness classifications alongside proof, impact, reproduction steps, and the action trace. Get the context to decide what needs attention.
Review finding evidenceCVSS 7.1CWE-89SQL injection in product lookup
/product.php · id parameter
HTTP 500HTTP 200Review the request, response, and reproduction steps.
From your target
to the evidence.
A continuous assessment workflow, with visibility at each step.
Define the target
Create an application and domain. Keep its assessments in one history.
Review the scope
Set budgets and constraints. Check and approve the assessment before execution.
Follow the actions
Inspect role activity, endpoint coverage, and requests recorded by the engine.
Review the results
Read findings with their evidence and traces. Export results for your team.
Questions.
The essentials before you enter the workspace.
What is CipherRed?
CipherRed is an AI-powered penetration testing workspace. It connects assessment scope, engine activity, endpoint coverage, findings, and recorded evidence.
What can I assess today?
Assessment capabilities depend on your connected engine. The current workspace brings together targets, actions, endpoint coverage, and recorded findings. Broader mobile, cloud, Active Directory, and source code workflows are on the product roadmap.
Can I inspect what the engine did?
Yes. Inside an assessment, Actions, Coverage, and Requests expose the activity and evidence returned by the engine. Findings link to their recorded traces when available.
Is the login connected to authentication?
The sign-in page is a UI preview while authentication is being developed. Use test credentials only; the preview does not send, save, or verify them. You can also open the workspace directly.