Visual DAG builder
Compose input, tool, script, agent and output nodes on a visible graph with explicit dependencies.
Input / Tool / Script / Agent / Output
Make security assessments repeatable.
Govern every consequential step.
Compose security actions, scripts and AI agents into visible workflows, require human approval before execution, run through workers and retain the execution record.
- Visual DAG workflows
- Workflow approval lifecycle
- Worker-backed execution
- Structured result artifacts
01 / InputTarget domainexample.com
02 / ToolAsset discoveryPassive discovery
03 / ToolService validationLive host probing
04 / AgentResult triageApproved agent definition
05 / Conditional edgeFindings present?Continue when true
06 / OutputAssessment resultsStructured export
This preview represents the current product model. Labels and controls may change during early access; example targets and outputs are illustrative.
Implemented product capabilities
Explore every capability →Built for the full assessment lifecycle.
Branch on structured results
Route a downstream node when a JSON field equals, differs from or contains the value your workflow expects.
Equals / Not equals / Contains
Edit workflows with AI
Describe a change, review the updated canvas and undo the last AI modification when it is not right.
Prompt / Review / Undo
Model the target precisely
Manage approved targets across domains, IPs, repositories, APIs, mobile apps, networks, files and URLs.
12 supported scope types
Approval before execution
Move workflows and supporting resources through draft, pending, approved or rejected states with reviewer context.
Draft / Pending / Approved / Rejected
Catalog reusable building blocks
Keep tool actions, agent definitions and runtime configurations available as governed workflow resources.
Tools / Agents / Configurations
Build → approve → run
Turn an assessment process into a governed execution path.
ChaosEngine keeps the target, workflow definition, reviewer decision and node outputs connected.
- 01
Compose the work
Connect input, tool, script, agent and output nodes on a visible DAG.
- 02
Review the scope
Require the right reviewer before the workflow is approved for execution.
- 03
Execute and retain
Run through configured workers and keep each node's artifacts with the execution record.
Who it is for
Explore every use case →Built for teams that repeat security assessment work.
Pentest consultancies
Standardize delivery across every engagement.
Give consultants reusable assessment workflows while keeping scope review, execution evidence and handoff visible to the team.
Explore use case →AppSec teamsMake recurring security reviews reproducible.
Compose repository and application checks into governed workflows that security engineers can rerun, review and hand off.
Explore use case →Internal red teamsGovern repeatable red-team operations.
Coordinate reconnaissance, tool execution and analysis with explicit scope, reviewer decisions and execution history.
Explore use case →Reference workflows
Open the workflow library →Start with a blueprint your team can challenge.
01
External reconnaissance
Move from passive subdomain discovery to approved vulnerability scanning without losing the chain of evidence.
Inspect blueprint →02Repository security review
Standardize repository intake, static analysis, AI-assisted review and a human-controlled final result.
Inspect blueprint →03Web application surface review
Turn web discovery, probing and approved scanning into a visible workflow that can be repeated for each engagement.
Inspect blueprint →Built by the team who secured
Governed by design
Offensive-security tooling needs explicit boundaries.
ChaosEngine is designed around authorized targets, role-based access, organization boundaries and recorded approvals. Our public security and acceptable-use policies state what is verified today and what remains in progress.
Review security postureChaosEngine early access
Bring one real assessment workflow.
We are onboarding a focused group of security teams and helping each one translate an existing process into a governed ChaosEngine workflow.