Continuous Verification

Security Assertions & Chaos Verification

Continuously prove that the security conditions you care about remain true—from BlackShield, the public internet, or your own security agents.

Create a suite

  1. Open Posture → Security Assertions and choose a starter or blank suite.
  2. Add stable case names, severity, and a trusted execution vantage.
  3. Select signed managed keywords and complete their typed arguments.
  4. Define expectations and readable all, any, or not result logic.
  5. Choose an hourly, daily, or weekly schedule and IANA timezone.
  6. Validate and run the non-actionable test. Review the immutable resolved plan before publishing and activating it.

Keywords and outcomes

Managed packs cover typed comparisons, DNS/TCP/TLS observations, bounded safe HTTP requests, and aggregate BlackShield posture queries. BlackShield never runs shell commands, imports, arbitrary expressions, tenant code, raw SQL, or unbounded loops.

Vantage points and credentials

Hosted-public targets must be current verified EASM assets and cannot use credentials. Agent vantage points can reach private services only when the exact host, origin, IP, or CIDR is approved by an admin.

Open Security Assertions Console →
Continuous Security Assertions & Chaos Verification