Assessment workspace
Scope · RoE · evidence · findings · WSTG · ASVS · ATT&CK
Xekute.
One assessment workspace for scope, traffic, evidence, tools, behavior maps, reports, and local AI—with the operator in control of every action.
ScopeProxyMapEvidenceAgent
Safe mode / Human in the loop
Evidence stays connected.
SCOPE app.example.com
AUTHORITY written / verified
MODE safe / approvals on
TRAFFIC 248 requests captured
AUTHORITY written / verified
MODE safe / approvals on
TRAFFIC 248 requests captured
Behavior map37 nodes / 62 edges
Findings04 / Evidence linked
WSTG coverageActive
01 / Product
Every assessment artifact, connected.
Xekute brings the fragmented parts of authorized security testing into one persistent workspace.
Define scope, authorization, testing windows, rate limits, restricted techniques, and granular authority before active work begins.
Captured traffic, tool output, hypotheses, evidence, findings, standards coverage, and reports remain connected and accessible outside the application.
03Planner / Agent / Ask
2×Safe + Test modes
LocalData + Ollama runtime
02 / Capabilities
From captured traffic to defensible findings.
Security workbench
Local proxy · history · Interceptor · Repeater · Intruder
Behavior map
Hosts · routes · workflows · redirects · risk · provenance
WebClone
Bounded capture · source review · isolated offline preview
Governed local AI
Authority · approvals · hypotheses · actions · run history
Commands + Toolbox
Recon · discovery · scanning · TLS · vulnerability tooling
03 / Assessment flow
Scope first. Evidence throughout.
Define authority
Record in-scope and out-of-scope assets, written authorization, limits, windows, and stop conditions.
Capture and map
Inspect HTTP traffic, run approved tools, and build a deterministic behavior graph with provenance.
Investigate and report
Connect hypotheses and findings to evidence, review agent actions, and preserve structured assessment files.
04 / Stack
Desktop local. Operator controlled.
ElectronNode.js 22+JavaScriptPython 3OllamaHTTP ProxyElectron ForgeJSONWindowsWSL Optional
05 / Get the product
Keep every action in scope.
$ git clone https://github.com/mahirhacks/Xekute.git
View repository ↗