x-run-pentest

Multi-phase penetration testing is coordinated by orchestrating existing scanning skills as subagents to execute reconnaissance, vulnerability scanning, exploitation validation, and reporting across local, dev, homolog, and prod environments.

Yes, penetration testing supports production environments but enforces strict environment restrictions and safety guardrails, requiring explicit production confirmation before executing any scanning or validation phases against prod targets.

The best way to coordinate multiple security scanning tools is using an orchestrator that delegates tasks to sub-skills like SAST, DAST, and secret scanning, generating a centralized, repeatable pentest report from the consolidated results.

Yes, the penetration testing orchestrator supports configurable quick or full operations, allowing you to select the depth of the assessment and execute specific phases like reconnaissance and vulnerability scanning independently or end-to-end.

Automated exploitation validation requires existing scanning skills to be present, as the orchestrator delegates tasks to sub-skills like SAST, DAST, and secret scanning to validate findings and compose a full pentest workflow.