Skip to content

ZERODAY / PROPRIETARY OFFENSIVE TECHNOLOGY

OBSIDIAN

Offensive security. Human accountability.

Zeroday’s internal offensive-security technology supports AI-led testing within approved scope. Experts validate findings and approve the final pentest report.

Explore penetration testing

Available through Zeroday penetration testing. Not separately licensed.

See how it works

THE OPERATING BOUNDARY

APPROVED ROEMACHINE EXPLORATIONHUMAN RELEASE

THE AUTHORIZED PATH

From approved scope to a reviewed report.

01 / 05 · BOUNDARY

Agree the scope before exploration.

Authorized assets, methods, exclusions, timing, and stop conditions define the space Obsidian may explore. The engine cannot widen that space for itself.

02 / 05 · DISCOVERY

Connect signals into possible attack paths.

Obsidian maps endpoints, identities, and trust relationships, then reasons across separate signals to construct candidate attack paths inside the approved ROE.

03 / 05 · VALIDATION

Validate within the agreed limits.

It attempts the minimum authorized proof needed to distinguish a reachable path from a theoretical possibility—without crossing the agreed proof boundary.

04 / 05 · EVIDENCE

Preserve evidence your team can reproduce.

Evidence is preserved for technical review, remediation ownership, and retest. The aim is a defensible record, never spectacle.

05 / 05 · HUMAN RELEASE

A person approves the final report.

Obsidian prepares the draft. A qualified person checks technical truth, business meaning, and the final deliverable before anything reaches the client.

WHAT IT IS

Obsidian is Zeroday’s internal offensive-security technology. It supports AI-led testing within an authorized scope. Experts validate pentest findings and approve the final report; Obsidian is not separately licensed.

It is not separately licensed.

We’ve found vulnerabilities in…

  • IBM
  • GitLab
  • Privy
  • Elastic
  • CLEAR
  • Zendesk

Security research. No customer relationship or endorsement implied.

ONE AUTHORIZED TARGET

Put Obsidian to work on your application.

The public route to Obsidian is Zeroday’s hybrid penetration-test engagement: written scope, approved Rules of Engagement, technical validation, and human-approved delivery.

Explore penetration testingOutcomes vary by target and scope. Obsidian is not separately licensed. A qualified human approves every client deliverable.