Z3r0Red team workbench

AI-native red-team workbench for authorized penetration testing and vulnerability research, with specialist agents, sandboxed tooling, evidence records, and replayable timelines.

Quick start

Documentation

Multi-agent orchestration

A lead agent coordinates specialist agents for intelligence gathering, validation, code audit, reverse analysis, and cryptanalysis.

Project evidence plane

Work projects bind graph-targeted work items to authorized assets, work item-attributed evidence, validated findings, continuous attack paths, retest candidates, and lead review decisions.

Retrieval context plane

Building knowledge graphs with LightRAG Core provides matching original document chunks and graph context for task-oriented inputs.

Replayable event timeline

The UI consumes normalized timeline events that can be streamed live or loaded later as history.

Distributed sandbox resources

Managed Docker hosts, images, and containers allow execution environments to be isolated, scaled, and assigned to projects.

Preloaded sandbox toolchain

The default sandbox image provides targeted DNS, HTTP, and service diagnostics plus local artifact, Android, firmware, reverse engineering, browser, and Python capabilities behind sandbox-local skills.

Unified egress layer

Container traffic can be routed through direct, HTTP, HTTPS, or SOCKS5 modes using one platform-managed policy surface.

Operator workbench

The frontend combines chat, workflow state, graph review, evidence chains, attack paths, sandbox selection, terminal, files, and noVNC.