Explore what is available now, what is being built next, and where live integrations will fit.
Select a module to inspect its role before opening the detailed capability descriptions below.
Agentic AI vulnerability assessment and pentesting workflows, with a dedicated console in the KAIScope platform.
Read capability and limitations ↓Agentic AI vulnerability assessment and pentesting workflows, with a dedicated console in the KAIScope platform.
Register AI configurations, assess agent/tool and MCP control declarations, review coverage and evidence, and draft professional pentesting engagements. Customer-side endpoint testing is a bounded CLI preview. Hosted tests remain disabled; RAG behavioral testing requires a separately authorized test environment.
Open Xoreta console ↗Local Solidity analysis with three compiler-backed rules, coverage disclosures and reproducible evidence.
Run the local agent on an authorized repository. Export JSON or self-contained HTML. The current engine uses pinned solc 0.8.30 and EVM Cancun; incompatible inputs fail explicitly.
Open console ↗Private report history, finding triage, revision comparisons and JSON downloads.
Workspace membership isolates reports. Imported assessments are format-validated, not independently authenticated. A finding marked resolved is an operator decision, not proof of a verified fix.
Open console ↗A shared register of contracts, wallets, services and accountable owners.
Private beta includes environment tags, criticality, accountable owners, archiving and owner-managed invitations. Owners control membership, analysts maintain asset records, and viewers have read-only access. Registering an asset does not run a scan.
Open console ↗Versioned asset baselines with explainable offline event checks.
Immutable snapshots, owner review, five configurable checks and local JSON exports. Private workspace access and asset-scoped version history. Supplied events are not authenticated, and no transaction policy is activated.
Open console ↗Manual read-only Ethereum and Base transaction snapshots.
Bounded public RPC lookups with chain, receipt, block consistency and freshness checks. Matching successful native-transfer-shaped events can be exported for replay. Scheduled transaction watches and client-managed read-only exchange connections require database and private encryption setup. Coinbase client onboarding awaits partner OAuth approval; its API-key adapter is for operator-owned accounts only. Collection is off by default; no private account is connected automatically. Token/swap decoding and transaction controls remain unavailable.
Open console ↗Private cases and explainable replay over supplied event evidence.
Replay saved baselines, preserve evidence snapshots, assign reviewers and export private reports. Saved evidence is private and pinned to its baseline version. Supplied data is unverified; no AML screening, live tracing or transaction controls are connected.
Open console ↗Private risk charts, review metrics and downloadable client summaries.
Private beta includes unresolved exposure by severity, mapped exchanges/assets, recurring findings, investigation status, UTC date filters and HTML/CSV/JSON exports. Current exposure is separate from period activity; missing mappings or review times remain explicit. Aggregates cover retained workspace data and are not security certifications. Owner-managed suppression windows, 15/60-minute digests, opted-in owner escalation and UTC-day sending budgets are available in private beta.
Open console ↗Observation-only proposals, independent reviews and private audit reports.
Private beta evaluates supplied unsigned proposals against pinned owner-reviewed baselines, records independent reviews and exports evidence. Owner-managed expiring integration keys support private server-to-server proposal submission and scoped status polling. Deduplicated in-app guard alerts link proposals to pinned investigations and aggregate risk reports. Monitoring health and a guided synthetic pilot are available without activating execution. Would allow/hold/deny are simulated outcomes only. No signing, sending, holding, blocking or enforcement is connected. Production enforcement remains planned and needs a customer-controlled integration.
Open console ↗The current beta is a limited static-analysis and private report workflow. Queue controls are prepared, but execution is disabled. Private inventory, member permissions, baselines and supplied-event investigation cases are available. Read-only snapshots, configured feed schedules, alert workflows and observation-only transaction reviews are available in private beta. Collection depends on configured providers and credentials. Real transaction enforcement remains planned.
Use the existing assessment workflow while the next platform foundations are built.
Open private console ↗