POL-001
Authority first.
Law, the contract, and the signed authorisation outrank the programme.
01About
Developed by ScaryByte.
Kestrel.ICU is an advanced, AI-powered offensive security tool. It was built to find the path an attacker would take, and to prove it.
02The mark
Hold still. Then strike a specific point.
A kestrel does not patrol for the sake of being seen. It holds, then commits to a point. The tool is built the same way. A superior offense is a controlled action against a target you have named, inside limits you have signed.
ScaryByte develops Kestrel and operates it. Scope, the run, and the readout stay with that team.
03Principles
Calm, and inside the document.
A ScaryByte platformWritten authority.
A person entitled to grant access signs the rules.
The path.
A reached objective, with the steps that got there, is the result.
Evidence.
Every finding says what was done, what it proved, and what to change.
The boundary.
Scope is the signed document.
One instrument.
Offensive security, developed by ScaryByte.
04Compliance
How ScaryByte complies.
The operator is bound before the tool is pointed at anything. These are the rules the programme actually keeps.
POL-014
The rules of play.
Stay inside the window. Do not sell a finding. Do not inflate a severity. Prefer proof that does not expose more than it must.
POL-004
The lab stays separate.
A rehearsal is not the customer run. One customer's material stays with that customer.
POL-008
Regulated data.
Live card numbers, health records, and customer secrets are not used as practice material.
POL-013
Confidential.
A customer's findings are not published without that customer's written approval.
POL-022
No quiet subcontract.
Anyone else on the work stays inside the same rules. Access ends when the engagement closes.
POL-025
Knowledge is declared.
Black, grey, or white box is named in the scope and the rules of engagement. The level does not replace written authorisation. A black-box test still needs named targets. The report states the level that was used, so a quiet interior is not mistaken for a clean one.
