Live assessmentSCOPED TARGETapp.example / api / accountsASSESSMENT OBJECTIVEInvestigate cross-account accessExplore the access pathIndependently verifyPreserve the evidenceVerification evidenceREQUEST / OBSERVED RESPONSEGET /api/accounts/other-account200 OK · account data returnedAccess outside the expected boundaryEvidence supports the finding
Red Agent
Verify the real-world impact
Assess a running target against a defined objective. Investigate potential weaknesses and report findings supported by proof.