Define agent permissions and target resources, then visualize every privilege escalation path. Detect critical gaps before deployment. Runs locally in your browser.
Enter the AI agent's granted permissions as an array of strings (e.g., "read:files", "execute:shell"). Set a trust level: low (sandboxed), medium (standard), or high (privileged). Higher trust levels increase escalation likelihood.
List each resource the agent might reach: databases, admin panels, file systems, APIs. Each needs an id, type, sensitivity (low–critical), and the access permissions required to interact with it.
Optional: define known exploit chains where one permission enables another (e.g., write:api → execute:shell via input validation bypass). These create additional edges in the attack graph.
Direct only shows immediate resource access. One-hop finds single-step escalations. Two-hop and Full reveal chained privilege escalation paths across multiple vulnerabilities.
Blue nodes = agent permissions. Green nodes = accessible resources. Orange nodes = escalated permissions. Red nodes = critical resources reached. Solid edges = direct access. Dashed edges = vulnerability-based escalation. Thick red edges = critical attack paths.
Click Export Security Report for a JSON assessment with risk scores, critical paths, and remediation guidance. Export Graph saves the full graph as GraphML for import into Cytoscape, Gephi, or other tools.