Security overview

ReconForge is a security tool, so trust is the whole point. This section describes how the platform is built to be safe to run and safe to buy.

• Your data stays yours. When self-hosted, nothing about your systems or findings leaves your network.
• Access is controlled. Single sign-on and hierarchical roles control who can see and do what, and data is scoped to your organization.
• Actions are recorded. A tamper-evident audit trail captures every security-sensitive action, including anything that was refused.
• It acts only where you authorize. Ownership is confirmed before an assessment starts, and scope is enforced.
• Safe by design. Confirmation demonstrates impact as proof of concept only, without causing damage or moving beyond the target.

In this section

• Safe exploitation: the proof-of-concept-only envelope.
• Isolation and egress: how assessment tooling is contained.
• Audit and tamper-evidence: how the record is protected.
• Compliance: our posture and what we enable for you.