— Architecture
Every hunt travels the same path. Nine layers, each with one job — and a human at the top of all of them.
Every question starts here and every write ends here. No tag, score, or scan changes without your explicit approval.
The human-in-the-loop platform where you meet the pack: review proposals, approve or reject writes, arm the Contract, and watch every hunt with full audit history.
Turns plain English into grounded workflows — reads schemas and real rows before it answers, never estimates.
A router plus 15 domain skills covering every navi domain — including the double-gated mail and remote-execution harnesses — plus The Hounds playbook skill that grounds each hound's detection logic, tag scheme, and selectors. Written once, followed every time. Intelligence lives in the orchestration; the facts always come from your data.
An MCP server exposing 20 tools and live schema resources. Reads run free; writes need the server armed AND per-call confirmation. The two heaviest tools — mail and remote execution — add a second environment gate on top.
Open-source Python (pip install navi-pro) that performs the deep logic: syncing, enrichment, tagging, ACR, exports, scan control.
A SQLite database holding your synced exposure data — up to 1TB for large enterprises or nimble in a Docker container. Your data stays local.
The official Tenable Python library that handles authentication, rate limits, pagination, and export streaming — so every API call is clean and supported.
Tenable Vulnerability Management, Tenable One, and Tenable WAS — synced into a local navi.db you query in milliseconds. Nothing is sent to a third-party cloud.
Data flows up. Approvals flow down. Nothing skips a layer.
Watch the full stack run a live hunt against real Tenable data.