Home / Goals
Write the mission. Get a verdict.
Tell Autopilot what to prove IDOR on /api/users, SQLi on login, OWASP on payments, or a named checkout flow. It compiles a MissionObjective, sends the right specialists first, and can stop when it is proved.
{ type: "vulnerability", targets: "/api/users", classes: "idor, bola", constraints: "stop_on_prove, needs_session", success: "Foreign User B reads User A object; control ID 404s" }
Compile the mission
Scan intent → MissionObjective: statement, targets, attack classes, success criteria, and prerequisites (e.g. identity session).
Seed the Strategist
Only the specialists that match your goal run first. Budget is focused, not sprayed across the whole surface.
Prove, then stop
Oracles confirm exploitability. When proved, Autopilot can stop early so wallet spend goes to evidence, not noise.
Foreign User B reads User A object; control ID 404s
Prove a class
IDOR, SQLi, XSS, and SSRF on the paths you care about, with a clear prove or refute verdict.
Assess a surface
Checkout, admin, or wallets. Focus Autopilot on a named API or user journey.
Checklist depth
OWASP-style coverage runs that still demand oracle confirmation, not grepped signatures.
Adversary goal
Frame the impact you care about (privilege, data access, forged credit) and hunt until blocked or proved.
Open-ended hunt
Budget-bound exploration when you know the risk area but not the exact vuln class.
No goal needed
Empty mission = full Autopilot. Map the surface and run all permitted specialists within RoE.
Focus the budget, or map everything
A named mission seeds the right specialists and can stop when proved. An empty goal is still full Autopilot inside your Rules of Engagement.
- Named targets and attack classes
- Specialists that match the objective run first
- Stop on prove so wallet spend goes to evidence
- Empty mission, whole permitted surface
- All specialists allowed by RoE
- Same oracle confirmation, broader coverage
Questions teams ask
Try Autopilot on your app
Create a free account, get ₹350 credit, and run a Quick scan with a mission goal or full Autopilot.