// PLATFORM
Architecture & Capabilities
Vex Raptor is an async FastAPI monolith with a 42-phase spec catalog, optional Gemini ReAct agent, and a confidence pipeline (double-check, baseline guards, public benchmarks with caveats). Which phases run depends on engagement profile and plan.
// CAPABILITIES
Five pillars a senior pentester would reach for.
Confidence pipeline
CONFIRMED requires independent-signal evidence (DIRECT, or DIFFERENTIAL with a passed negative control) and, where applicable, a double-check re-probe. Every finding scored HIGH/MEDIUM/LOW, guarded by a 3,000+ test anti-false-positive corpus. Includes real DOM-XSS detection via a headless browser.
Autonomous AI agent
An optional Gemini ReAct agent probes LLM/RAG/agent surfaces independently from our native attack-technique catalog — with scope-lock and prompt-injection tripwires so targets cannot steer it off-engagement. Recall varies by app surface (see public benchmarks); it probes LLM, RAG, and agent/tool endpoints too (OWASP LLM + MITRE ATLAS).
Attack chains
Correlates related findings into board-ready narratives (IDOR + mass assignment → privilege escalation), mapped to MITRE ATT&CK — detection, not automated exploitation.
Re-verification signal
After you fix a finding, we re-probe the same vector and report whether the response changed — a signal for your team to review, not a certification that the fix is CLOSED.
MSSP & compliance
Multi-tenant orgs for partners, partial tool-name sanitization in pentest HTML when hide_tooling is on (not full white-label branding yet), mapping findings to SOC 2 / PCI-DSS / ISO / GDPR controls (mapping only — not certification or PASS/FAIL verdicts), and CI/CD build gating.
// HOW IT WORKS
42 phase specs. Profile-scoped execution.
The native engine catalog covers 42 attack phase specs — which ones run depends on your engagement profile, plan, and applicability. Discovery, attack execution, and a confidence pipeline feed a single report. The optional Gemini ReAct agent and native catalog are separate components, not a universal merge on every scan.
// DEPLOYMENT
Self-hosted. API-first. CI/CD-native.
Self-hosted
Deploy on your own infrastructure. No data leaves your perimeter. Docker-compose up in minutes.
API-first
Every capability exposed via REST. Integrate Raptor scans into any security workflow or SIEM.
CI/CD native
GitHub Actions, GitLab, any pipeline. Webhook scan on every deploy with pass/fail gating. Pentest as code.
Docker-ready
Multi-stage image with Postgres 16 + Redis 7 + Raptor. Full stack in a single compose file.
# docker-compose.yml services: postgres: image: postgres:16-alpine redis: image: redis:7-alpine vex-raptor: image: vex-raptor:latest ports: ["8000:8000"] worker: image: vex-raptor:latest command: arq src.arq_worker.WorkerSettings