colonizer
install

modules / security

red team

a swarm of bug hunters raids your own repository and reports what they can reproduce.

securitytests only

status
tests only ships with colonizer, but is covered by tests only: it has not yet done real work in a colony.
version
ships with the harness
licence
mit (part of the harness)
source
docs/red-team.md ↗
docs
red team

what it does for you

one to eight hunters, each in its own colony with its own focus, look for bugs they can prove. a second model call checks every finding before it is filed as an issue. with autofix on, they open fix pull requests instead.

it waits until no other colony is working. a security preset swaps in security focus areas and a token-free scan for committed secrets first.

what it needs

how to turn it on

from a workspace row on the overview: the red-team wizard. once, or weekly or monthly.

how far it has been tested

covered by tests only: no raid has run on a real machine yet.

← all security · every module