How to use PENOPS
Set up an engagement, review what the agents find, and carry each finding through to a verified fix. Start with your first engagement, or browse by topic below.
Get started
What is PENOPS
PENOPS runs AI agents that test what you own, routes what they prove to your delivery boards, and keeps a human in control of every risky step.
Core concepts
The terms you meet across PENOPS, what each one means and where to read more.
Your first engagement
Walk through PENOPS from sign-in to your first findings using a web app engagement.
Engagements
Create an engagement
Set up a recurring security test of a web app, a cloud provider, LLM endpoints or a secrets source with the guided wizard.
Engagement settings
Edit an engagement's scope, tests, schedule and limits, and move it between Draft, Active and Paused.
Run and schedule scans
Start, retry and cancel scans, choose when scheduled scans may run, and see upcoming runs on the scan calendar.
Cloud permissions
The read-only access a cloud credential needs for PENOPS to inventory and scan your AWS, Azure or GCP environment.
Credits and usage Preview
Credits, quotes and the Usage page are in preview; the figures they show are not final.
Findings & delivery
Delivery boards
Every confirmed finding becomes a card that moves from triage to a verified fix, or into the Risk Register.
Treatments and workflow policy
Choose how each risk is treated, and set the routing, gates, WIP limits and SLAs that govern every card.
Fix validation
PENOPS re-tests a fix before it closes, reopens findings that come back, and stops scanning what you suppress.
AI agents
Targets and missions
Watch PENOPS's AI agents test each asset, read every step they took, and follow confirmed attacks to the findings they created.
Human-in-the-loop approvals
The agent pauses before any test that could change data or disrupt a service, and waits for you to approve or reject it.
Agent Profile
See and shape what the agent remembers about a target, and every scan it has run on each mission.
Administration
Team and permissions
Invite colleagues, organize them into groups and decide exactly what each person can see and change.
Organizations
Split your workspace into organizations that hold engagements, and switch between them.
Integrations
Connect the cloud accounts, LLM endpoints, web app logins and code sources your engagements test.
Sign up and onboarding
Create your PENOPS workspace, choose your data region and sign in.