> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vigolium.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Gimorra - An Autonomous Offensive-Security Agent

> The autonomous offensive-security platform within Vigolium: give it an authorized target, a goal and a scope, and it runs the whole engagement.

**Gimorra** is the autonomous offensive-security platform within Vigolium. *It hunts while you sleep.*

Give it an **authorized** target, a goal and a scope. It takes the engagement from there — **recon → scan → propose a PoC → prove it → report** — and wakes you only when blast radius demands a human.

Vigolium is the engine. Gimorra is the operator.

![Walkthrough of a gimorra scan: brief, recon, proposed candidates, deterministic confirmation](https://mintcdn.com/vigolium/V_3PNut6xk4AGTGr/images/gimorra/gimorra-scan.svg?fit=max\&auto=format\&n=V_3PNut6xk4AGTGr\&q=85\&s=a428789cbe14d46c799b8cf18e5c35ad)

One run, start to finish: a brief becomes a plan, recon maps the target, the agent proposes candidates, and the validator throws out everything it cannot prove

Want to see it work? [Request a Demo](https://www.vigolium.com/request-demo), or head to [gimorra.vigolium.com](https://gimorra.vigolium.com/).

## Safety by construction, not by babysitting

Most offensive agents ask a human to approve every action. That is not caution — it is an admission that the agent could do real damage if nobody is watching.

Gimorra closes that gap in code. Three controls make a run **incapable** of hurting the target, so supervision becomes a dial you set once instead of a seat you sit in.

> **The validator decides**
>
> The agent proposes. Code disposes. Every finding is re-proven by deterministic, non-AI code using the least invasive action that settles it. **Nothing self-certifies.**

> **Cleanup and a kill switch**
>
> Whatever a run touches, it puts back. One command ends the engagement: queued work goes unclaimable, and no further proof is accepted.

> **Scope guard on every call**
>
> Deny wins. Ambiguity blocks. Checked on every single tool call, before anything else gets a vote.

None of the three touches the model, the agent, or the network stack. **Prompt-inject the model and they still hold.** That is the whole design.

> [!WARNING]
>
> Gimorra operates only against targets you are authorized to test. **No authorization artifact, no active operation** — enforced in code, not in policy.

## Point it at anything

| Give it | Get back |
| - | - |
| A URL, host, domain, IP or CIDR | A scoped, authorized engagement — mapped, tested, and the real bugs proven |
| A sentence of plain English | The same run, aimed where you said: *"focus on IDOR and broken access control"* |
| An API spec or a captured session | Every documented operation turned into testable surface before a packet moves |
| A repository or a shipped app bundle | A source audit, beside the live target or on its own |
| A full bug-bounty scope document | Every in-scope asset, worked as one engagement |

One dial sets how hard it pushes, from fully passive to aggressive. Nothing else needs tuning to get a first result.

## What lands on your desk

> **Bugs, not maybes**
>
> Every finding in the report was reproduced by deterministic code. No triage queue of plausible-looking noise.

> **Receipts for all of it**
>
> A hash-chained evidence trail ties each finding to the exact exchange that proved it.

> **A report you can forward**
>
> Verified-only Markdown or HTML, plus a live dashboard while the run is still going.

> **Memory between runs**
>
> Surface, tradecraft and accounts carry forward, so the second engagement starts where the first stopped.

## Where it sits

| | What it is | Reach for it when |
| - | - | - |
| [**Native scan**](https://docs.vigolium.com/native-scan/how-it-works.md) | Deterministic, module-based scanning | You want broad, repeatable coverage, fast |
| [**Agentic scan**](https://docs.vigolium.com/agentic-scan/how-it-works.md) | AI inside a scan you are driving | You want AI judgement on a run you control |
| **Gimorra** | An agent that runs the engagement | You want the engagement handled, start to finish |

> [!NOTE]
>
> Gimorra runs its tools on the machine you start it on, so that machine is the blast radius. Start it in a container — there is an all-in-one image for exactly this.

***

Curious what it finds on your own target? [Request a Demo](https://www.vigolium.com/request-demo), or email [jessie@vigolium.com](mailto:jessie@vigolium.com).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.