SECHIVE / OPERATOR CONTROL PLANE REV 04.A · 2026.05
§ 01 — Autonomous, but defensible.

Findings that survive review,
not just findings that arrive fast.

SecHive is an operator-grade autonomous pentesting workbench. Every finding ships with replayable evidence, signed attestation, and a chain a human reviewer can actually defend — across pentest, bug bounty, source audit, mobile and RE modes.

Local-first
Proof-first
Operator-grade
Fig. 01 · Proof loop
I
Scope & Authorization
targets · exclusions · approval gates
II
Recon & Signals
routes · APIs · source · APKs · credentials
III
Skill Routing
specialist agents per signal class
IV
HypothesisGraph
scored · branched · refutable candidates
V
Runtime Validation
benign PoC · scope guard · negatives retained
VI
Proof Pack
sha256 · replay.sh · attestation · redaction
VII
Cosigned Report
mode-specific · auditor-ready · ↺ loop
Evidence aligns to
NIS 2EU 2022/2555 DORAEU 2022/2554 SOC 2AICPA TSC ISO 27001A.8.8 / A.8.29 PCI DSS 4.0Req. 11 HIPAA§164.308(a)(8) OWASPAPTS / AISVS
All frameworks →
95.19%
XBOW black-box · 104 cases
Best-of black-box wins across the full recorded campaign.
100%
Source-aware coverage
Final source-enabled run, fully proof-first.
90
Bug bounty proof items
HackerOne-shaped reports, public-safe inventory.
100%
OWASP APTS · AISVS coverage
Every control referenced and evidence-mapped.
§ 02 — The market

Most AI security tools are good at producing activity. SecHive is built around a stricter question.

Scanners give you a long list of maybes. Agentic frameworks give you a long transcript. Both leave the human operator to reconstruct what happened, what was actually proven, and what is safe to put in a report.

SecHive collapses that gap. The runtime writes its own audit trail as it works, so the report is the artifact — not the starting point.

Scanners & agentic AI tools

A long transcript. A list of maybes.

  • You get raw output — then spend hours rebuilding what actually happened.
  • No deterministic way to reproduce a finding on demand.
  • Evidence is scattered across screenshots, logs, and chat windows.
  • Negative results are dropped — you never see what the agent ruled out.
  • No signed attestation. The report is whatever the operator types up.
  • No policy gate on exploitation — easy to drift outside scope.
SecHive

A defensible report — built as the work happens.

  • Report-ready in minutes — provenance captured by the runtime, not glued on later.
  • Every finding ships with a deterministic replay.sh in the proof pack.
  • SHA-256 evidence chain & cosigned attestation for every artifact.
  • Negative evidence is retained — refutations are first-class artifacts.
  • Cosign-signed reports survive client review and SOC 2 audit.
  • Scope-checked, benign-PoC validation. The runtime refuses to leave scope.
§ 03 — The SecHive Loop

Seven stages between a target and a defensible report.

SecHive is not a single prompt. It is a controlled pipeline that enforces scope, routes signals into specialist skills, plans hypotheses, validates them at runtime, preserves negative evidence, and only then promotes a candidate to a finding.

I — Scope
Authorization
Targets, surfaces, exclusions and approval gates loaded as policy.
II — Recon
Signals
Routes, APIs, source, APKs, browser state and credentials inventoried.
III — Routing
Skills
Specialist skills selected per signal. No prompt-of-everything.
IV — Hypothesize
Plan
Candidate weaknesses scored, branched and queued in HypothesisGraph.
V — Validate
Runtime PoC
Benign exploit attempted under scope guard. Negative results retained.
VI — Promote
Proof Pack
Evidence bundled with hashes, replay metadata, reviewer disposition.
VII — Sign
Report
Mode-specific report rendered with cosigned attestation and provenance.
§ 03.A — Why a loop, not a prompt

The loop is the product.

Anything in security can be made to look impressive in a transcript. SecHive's loop is designed to make the same work survivable: when a finding is challenged in client review, on a HackerOne triage queue, or in a SOC 2 audit — the chain is already there.

Walk through the platform
§ 04 — Operator UI

Mission control, running on your machine.

SecHive is local-first. The operator UI shows running campaigns, hypothesis graphs, evidence drawers, replay buttons and approval queues — all served from the same machine that holds your scope.

SecHive — Mission Control — localhost:7731
Campaigns
Active runs
All campaigns
New campaign
Evidence
Proof packs
Replay queue
Settings
Scope policy
Active campaigns
3
Running
14
Hypotheses
7
Validated
2
Promoted
api-auth-audit · prod-api.target.invalid
SK.02 bizlogic_hunter · SK.03 api_security · 6 hypotheses queued
pentest
00:23:41
running
bbp-submission-04 · hackerone-program
SK.01 recon_router · validation stage · 2 candidates pending
bug-bounty
01:04:17
running
pr-audit-#2847 · github/org/repo
SK.04 validation_bypass · diff-aware · 3 candidates
pr-audit
00:07:02
complete
mobile-apk-review · com.target.app v2.4.1
SK.07 apk_inspector · scheduled · awaiting authorization
mobile
queued
Hypothesis graph · api-auth-audit
High · SK.02
Signed authorization nonce not consumed — replay feasible via /v1/exec
Med · SK.03
IDOR on user_id param — numeric enumeration, no ownership check observed
Med · SK.04
Input validation denylist gap — unicode normalization bypass candidate on /submit
Low · SK.01
Staging endpoint exposed — no auth, returns 200 with schema leak
+2 more · negatives retained (9)
Read the platform
§ 05 — Run modes

One workbench. Six disciplines, each with its own truth.

Pentest, bug bounty, own-source bug hunt, mobile, reverse engineering and PR audit are different flows — different signals, different scope, different evidence standards. SecHive treats them that way instead of reusing one prompt with a different label.

  1. i. Pentest Authorized engagements with scope policy, approval checkpoints, and a deliverable that survives the client's legal review. production
  2. ii. Bug Bounty HackerOne-shaped reports with deterministic repro scripts, CVSS, and redaction-safe write-ups. production
  3. iii. Own-Source Bug Hunt Source-uploaded analysis where suspicions are kept distinct from validated runtime findings until proven. production
  4. iv. Mobile / APK Review Exported components, broadcast paths and binder surfaces — backed by static and runtime evidence. production
  5. v. Reverse Engineering Binary triage, anti-tamper inspection, and protocol reasoning where reproduction matters more than scan count. production
  6. vi. PR Audit Pull-request gating with diff-aware reasoning. Designed to catch regressions without flooding reviewers. production
§ 06 — Public proof

Three independent surfaces. Verifiable.

SecHive's public proof is intentionally split. The redacted bug bounty corpus shows real-world breadth. The Juice Shop reports are full-fidelity and reproducible. The XBOW-style campaign sits between the two as a controlled benchmark.

SURFACE.AExternal

Bug Bounty

Ninety sanitized results across business logic, source-first policy, cross-domain reasoning, identity, mobile and protocol.

Sanitized findings90
In HackerOne review10
Method families6
Read the proof pack
SURFACE.BReproducible

OWASP Juice Shop

Full unredacted black-box and white-box reports against the current 111-challenge tree. Routes, payloads, source references and evidence snippets retained.

Live runtime findings35 / 111
Source-aware items58 / 111
CVE references20
Read the report
SURFACE.CBenchmark

XBOW-style campaign

One hundred and four recorded validation cases, paired black-box and white-box. 99 black-box wins, 104 white-box wins, 100% any-win.

Recorded cases104
Black-box wins95.19%
White-box wins100%
Read the campaign
Claim boundary. SecHive does not claim OWASP certification, third-party attestation, or paid bounty outcomes. We claim internal evidence-backed alignment, public-safe proof surfaces, and reproducible benchmark output. Scoring methodology is documented per surface.
§ 07 — Compliance

Pentest evidence that maps to the framework your auditor reads.

SecHive renders evidence matrices for SOC 2, ISO/IEC 27001, NIS 2, DORA, PCI DSS 4.0 and HIPAA — preserving the boundary that compliance ultimately depends on organizational controls and auditor review.

§ 08 — Featured exploit chain

A finding only counts if its invariant is broken twice.

Runtime authorization replay is one of SecHive's most-cited public-safe write-ups. The pattern is small. The proof shape is what makes it credible to a triager who has seen a thousand vague reports.

1

Hypothesis

A signed runtime authorization carries a nonce-like value. bizlogic_hunter flags the value as never observed in durable state.

2

First execution

The relayer submits the signed action. The validation function returns OK. The execution wrapper performs the privileged side effect.

3

Replay

The same authorization bytes are submitted again, unmodified. The nonce is not consumed; the digest validates.

4

Second execution

The privileged side effect occurs a second time. The invariant "one signed authorization authorizes one execution" is broken.

5

Promotion

SecHive promotes the candidate. The proof pack contains: the signed payload, two execution receipts, side-effect deltas, the validation source path, a cosigned attestation, and a deterministic replay.sh.

Open full write-up
§ 09 — Output

A report you can hand to legal. A manifest you can hand to engineering.

Every SecHive run produces both: the human-facing report (mode-specific) and a machine-readable proof pack — provenance, redaction manifest, artifact index and attestation — that downstream tooling can verify or replay.

EXAMPLE — replay.sh in a proof pack
# sechive-proof-pack/replay.sh — sha256:7c3a…
set -euo pipefail
TARGET="https://lab.example.invalid"
AUTH="$(cat artifacts/signed-authorization.b64)"

# first execution — expected OK
curl -sS -X POST "$TARGET/v1/exec" \
  -H "X-Authorization: $AUTH" \
  -d @artifacts/payload.json | tee out/01.json

# replay — invariant broken if 200 OK
curl -sS -X POST "$TARGET/v1/exec" \
  -H "X-Authorization: $AUTH" \
  -d @artifacts/payload.json | tee out/02.json

diff <(jq .receipt out/01.json) <(jq .receipt out/02.json) \
  && echo "REPLAY ACCEPTED — finding confirmed" \
  || echo "replay rejected — invariant holds"
PROOF PACK CONTENTS
findings.provenance.jsonsigned
report.attestation.jsoncosign
artifacts/ (raw evidence)sha256
replay.shdeterministic
redaction-manifest.yamlscoped
negative-evidence/retained
model-cost.jsonaccounted
report.md / report.htmlrendered
See the full output matrix
§ 10 — Ready

Bring an authorized scope. Leave with a defensible report.

SecHive is local-first. Pilots run against your own infrastructure or against a controlled lab — never against systems you don't own or aren't explicitly authorized to test.