Skip to content

// PLATFORM

Architecture & Capabilities

Vex Raptor is an async FastAPI monolith with a 42-phase spec catalog, optional Gemini ReAct agent, and a confidence pipeline (double-check, baseline guards, public benchmarks with caveats). Which phases run depends on engagement profile and plan.

// CAPABILITIES

Five pillars a senior pentester would reach for.

Confidence pipeline

CONFIRMED requires independent-signal evidence (DIRECT, or DIFFERENTIAL with a passed negative control) and, where applicable, a double-check re-probe. Every finding scored HIGH/MEDIUM/LOW, guarded by a 3,000+ test anti-false-positive corpus. Includes real DOM-XSS detection via a headless browser.

Autonomous AI agent

An optional Gemini ReAct agent probes LLM/RAG/agent surfaces independently from our native attack-technique catalog — with scope-lock and prompt-injection tripwires so targets cannot steer it off-engagement. Recall varies by app surface (see public benchmarks); it probes LLM, RAG, and agent/tool endpoints too (OWASP LLM + MITRE ATLAS).

Attack chains

Correlates related findings into board-ready narratives (IDOR + mass assignment → privilege escalation), mapped to MITRE ATT&CK — detection, not automated exploitation.

Re-verification signal

After you fix a finding, we re-probe the same vector and report whether the response changed — a signal for your team to review, not a certification that the fix is CLOSED.

MSSP & compliance

Multi-tenant orgs for partners, partial tool-name sanitization in pentest HTML when hide_tooling is on (not full white-label branding yet), mapping findings to SOC 2 / PCI-DSS / ISO / GDPR controls (mapping only — not certification or PASS/FAIL verdicts), and CI/CD build gating.

// HOW IT WORKS

42 phase specs. Profile-scoped execution.

The native engine catalog covers 42 attack phase specs — which ones run depends on your engagement profile, plan, and applicability. Discovery, attack execution, and a confidence pipeline feed a single report. The optional Gemini ReAct agent and native catalog are separate components, not a universal merge on every scan.

// 01Recon
// 02Web Attack
// 03API Fuzzing
// 04Network
//Confidence Pipeline
//Enterprise Report
Native engineArsenal engineAI agent (Gemini ReAct)Vex API intel

// DEPLOYMENT

Self-hosted. API-first. CI/CD-native.

Self-hosted

Deploy on your own infrastructure. No data leaves your perimeter. Docker-compose up in minutes.

API-first

Every capability exposed via REST. Integrate Raptor scans into any security workflow or SIEM.

CI/CD native

GitHub Actions, GitLab, any pipeline. Webhook scan on every deploy with pass/fail gating. Pentest as code.

Docker-ready

Multi-stage image with Postgres 16 + Redis 7 + Raptor. Full stack in a single compose file.

# docker-compose.yml
services:
  postgres:
    image: postgres:16-alpine
  redis:
    image: redis:7-alpine
  vex-raptor:
    image: vex-raptor:latest
    ports: ["8000:8000"]
  worker:
    image: vex-raptor:latest
    command: arq src.arq_worker.WorkerSettings
Compliance-ready:OWASP Top 10MITRE ATT&CKPCI-DSSGDPRISO 27001CWECompliance mapping · not certified