Wedjat Signal: clear

The Eye of Horus · defensive security lab

Know you are clear.
Green means go.

Wedjat is an AI-directed, evidence-anchored red team. We do not just scan. We prove exactly how an attacker gets in, hop by hop, and every step is replayable. ugotpwned, for the AI era. From the defender's side.

How we operate

Powerful, and leashed on purpose.

Our agent tests you like a real adversary. Its reach is bounded by enforcement, not by intent. The constraint that keeps it legal is the same one that makes it trustworthy.

01

Proof, not noise

Nothing is a finding until exploitability is demonstrated. Find it, prove it, hand it off. No CVSS guesswork, no scanner output you have to triage. Each claim is a command you can replay.

Evidence-anchored
02

Boxed and leashed

The agent runs inside a default-deny network jail. Your data stays in your box. We physically cannot reach anything outside your authorized scope, and every action is written to an append-only audit log.

Scope-gated at every hop
03

Covert by default

We test you the way an adversary would, while the building is empty and the fire marshal watches. Assumed-breach, quiet, and real. You see what a patient attacker sees, before one does.

Adversary emulation
04

Ethical by construction

Authorized-only, consent-gated, and bounded in writing. The line we refuse to cross is the brand. Reachability that crosses your scope boundary is recorded as a finding, never traversed.

The constraint is the product

The blast radius

One leaked key. Four hops. The crown jewels.

This is the moment you bought the insurance for. From a single authorized foothold, we walk every reachable hop and prove each one. Here is a real shape of it.

WDJ-0042-PATH-01 assumed-breach traversal Critical
Exposed dev credential found in a public .git/config on dev.example.com
ev_4471
Internal CI host credential reuse authenticates to ci.example.com:8080
ev_4490
Artifact registry CI service token in the environment grants read
ev_4502
Production customer database a registry image embeds a DSN that reaches prod
ev_4517

Blast radius: one leaked dev key reaches your production customer identity store, in four hops. Every edge above is a replayable command, not an assertion.

We never take what is behind the door. To prove database access we create our own marker, write it, read it back, then drop it. We demonstrate the door opens. We never read one row of your data.

When the light is green, you are clear to go.

Let us prove what an attacker can reach, while it is still ours to fix. Find, prove, hand off. Then watch the signal turn green.