02 / Assessment workflow
Sift
A scope-driven framework that turns scanning output into reviewable findings and reports.
THE QUESTION
How do you move from a list of hosts to a useful assessment record without losing the underlying evidence?
THE APPROACH
Sift joins preflight scope checks, adaptive Nmap scanning, service plugins, deterministic CVE matching, cross-host correlation, and Markdown and CSV reporting.
DESIGN DETAILS
- A scope file drives internal, external, and web targets.
- Adaptive scans deepen coverage where observed signals warrant it.
- AI-generated plugins enter quarantine for review before they can run; AI narration does not create new findings.
CURRENT EVIDENCE
The repository documents the current modules and their behavior. Reported findings still require an assessor's review and target-side confirmation.