Start a Full Hunt

Start a Full Hunt

Start full hunt gives a whole program to the AI: its scope, rules, assets and what is new. The AI then works through a complete hunt step by step. It uses CoHunters and sub-agents to work in parallel, and stays inside your scope and rules.

Before you start

• Check the program details. The AI reads your scope, out-of-scope list and rules of engagement before it starts. See Programs.
• Run recon first if you have not yet, so the AI has assets to work from. See Run recon.
• Pick a permission mode for the chat. It decides which actions need your approval. See Permission Modes.

Start a full hunt

1. Open a chat. The hunt runs in the chat you have open.
2. Open Programs, select the program and click Start full hunt.
3. The AI gets the whole program and starts working.

The chat is named for you, for example Full hunt: example-program, so it is easy to find later.

While it runs

• The AI posts short progress notes in the chat.
• Steer it by typing in the chat, for example "focus on the API first".
• Press Stop at any time to end it.
• If it needs something only you know, a question card appears. See Questions from the AI.

Hunt the new assets

New and changed assets are where first-to-find bugs usually are. To start with those:

1. Run recon on the program. See Run recon.
2. Select the program and click Hunt the new assets.
3. The list of new and changed assets is sent to your current chat, and the AI investigates those first.

What you get

Every finding the AI logs has been reproduced first, and you can turn it into a ready-to-submit report. See Findings & Reports.

Related

• Start a hunt from an empty chat, for a target you have not set up yet
• Go full mode, let the AI decide instead of asking you
• Bug-Bounty Hunting