Ugrás a fő tartalomhoz

Authorized use

AgentRidge is a professional tool for authorized penetration testing. It is built to be used against systems you own or have explicit written permission to test — and it enforces that at launch.

The mandate requirement​

Every mission requires you to confirm that penetration testing is authorized for the target before it can start. This is not a formality the app lets you skip — the confirmation is enforced by the application itself. Without it, the mission will not launch.

Your responsibilities​

  • Get written permission. Have a signed mandate, engagement letter, or equivalent authorization for every target before you test it.
  • Stay in scope. Only test the hosts, URLs, and network ranges covered by your authorization. Keep off unrelated systems and network segments.
  • Follow the law. Unauthorized access to computer systems is illegal in most jurisdictions. You are responsible for complying with all applicable laws and contracts.
  • Coordinate. For production systems, agree on timing, rules of engagement, and points of contact with the system owner in advance.

Built-in guardrails​

Within an authorized engagement, AgentRidge is designed to be a controlled tool:

  • No irreversible harm. It avoids destructive actions — data wiping, ransomware-style behavior, and denial-of-service that risks production — unless scope explicitly allows it.
  • Scope-aware. It works the declared targets and doesn't wander onto unrelated systems.
  • Proportionate in Auditor mode. Auditor mode stays non-destructive and stops at the minimum proof needed for a finding.

Read more about how the agents stay controlled in Autonomy & agent unlocking.

Use responsibly

Running AgentRidge against systems you are not authorized to test may be illegal and is a misuse of the product. Authorization is your responsibility.

Data handling​

Engagement data — targets, findings, evidence, and reports — is stored locally on your machine (see Data locations) and is not sent to the cloud. Handle the reports and evidence you produce according to your agreement with the client. See Local-first design.

Language