Product / Architecture

Multiple models.
One curated harness.

Understand the building blocks of Ashwa Labs’ security testing product: targets, testing modes, agents, orchestration and actionable output.

The system
at a glance.

A conceptual view of how the product’s core components fit together.

ASHWA / CONCEPTUAL ARCHITECTUREHARNESS + AGENTS
Web applicationsAPIsAI / LLMs
WHITE-BOX + WEBSITE / BLACK-BOX
Curated harness

Freedom to investigate.
Constraints to stay focused.

Security agent
Model A
Security agent
Model B
Security agent
Model C
Findings + proof of concept + remediationUnderstand the issue. Reproduce it. Plan the fix.
CONCEPTUAL VIEW / MODEL LABELS ARE ILLUSTRATIVE

Inside the approach.

01

The security agents.

A group of agents powered by various models performs the security work within the harness. Multiple models are part of the product’s design.

02

The curated harness.

The custom-built environment around the agents balances investigation freedom with constraints. That balance is deliberately curated rather than left to an unrestricted agent.

03

The orchestration.

The orchestration brings the agents and harness together as a coordinated security assessment workflow.

04

The assessment output.

Findings connect to proofs of concept and remediation guidance, helping your team understand the issue and plan a response.

Two testing modes.
One security focus.

Choose the perspective that fits the access available and the question you need to answer.

01 / WHITE-BOX + WEBSITE

Inside context.
Application behavior.

Bring internal context, such as source code, together with a website in scope. Give the assessment visibility into implementation as well as the application’s exposed behavior.

Discuss during scoping: available code, application access and the boundaries of the assessment.

02 / BLACK-BOX

Test from
the outside.

Assess web applications, APIs or AI/LLM systems without relying on source-code access. Start from the interfaces and access agreed for the engagement.

Discuss during scoping: targets, credentials where relevant and permitted testing activities.

A technical conversation
worth having.

Bring the systems you want assessed and the access you can provide. We’ll discuss how the product fits your use case, the testing boundaries and the output your team needs.

Discuss a product trial

Put the harness
to work on your scope.

Book a trial