The Problem
Findings that never reach the right person never get fixed. The pack can discover, prioritize, and tag all day — but exposure only shrinks when the owner of an asset actually gets their tasks, with a deep-link into the platform where the fix lives. Reports that land on everyone's desk get read by no one.
What It Does
Gabriel is the loop-closer — it turns the pack's findings into owner-routed email with deep-links back into Tenable. It reads Atlas Owner: tags and emails each owner only their assets, plus CISA KEV fire-alarms, certificate countdowns, and morning briefings — double-gated, previewed, and logged before anything sends.
Key Capabilities
- Owner-routed remediation — reads Atlas Owner: tags and emails each owner only their assets, each with its Tenable asset URL and top-finding plugin deep-links.
- KEV fire-alarm & cert countdown — targeted alerts for actively-exploited vulns (Laelaps) and certs expiring within N days (Certania).
- Morning briefing — exposure at a glance for leadership (On the Scent).
- Any-hound hand-off — any hound can route its findings to Gabriel: finding IDs, matched assets, and the tag applied, labelled with which hound produced it.
- Technical & board templates — per-asset findings with deep-links for the people who fix it; summary counts for leadership.
- Double-gated sending — preview is always read-only; sending needs the write gate plus a separate email opt-in plus explicit confirm, and every send is logged.
How It Works
Gabriel reads navi.db read-only and sends via navi action mail through the gated CLI (Resend or SMTP, configured once out-of-band). Every send is recorded in the Tagging log as an accountability ledger — who was notified, and when.
Who It's For
Vulnerability management teams that need findings to reach asset owners; team leads who want each owner to get only their tasks; CISOs who want the morning briefing in their inbox.
Proof Points
Preview and composition are always available and read-only; a send requires the master write gate, a separate email opt-in, and an explicit confirm — three independent gates before a single message leaves.
Works Better With
Gabriel consumes Atlas ownership routing, Laelaps KEV, Certania expiry, and On the Scent's briefing — turning any hound's findings into email that lands with the right person.