Products Offensive security

Sortavex

Assessment tooling that stays inside the enclave.

Sortavex is being built for teams that need to perform offensive assessment work inside an isolated environment, beginning with TCP network reconnaissance.

Request a product discussion

In development

Why it exists

Run the assessment work without opening the enclave.

Security teams in disconnected environments should not have to export mission data or depend on a hosted control plane to perform basic reconnaissance. Sortavex keeps the product boundary local and treats offline operation as an architectural requirement.

Product scope

The current product direction.

TCP network reconnaissance

The current product phase focuses on discovering and characterizing reachable network services from inside the approved environment.

Typed application gateway

A TypeScript gateway provides a controlled boundary between the operator-facing application and assessment execution.

Isolated assessment engine

Assessment logic runs in a separate Python engine so execution responsibilities remain distinct from the application layer.

Controlled offline updates

The deployment model is intended to accept product and supporting-data updates through a deliberate offline transfer process.

Deployment model

Designed around isolation from the beginning.

Sortavex remains in development. The architectural direction is an on-premises deployment with no outbound internet dependency and a controlled process for bringing updates into the environment.

  • No hosted control plane in the operating path
  • Assessment data remains inside the environment
  • Separate application and execution layers
  • Offline workflow for updates and supporting data
Technical review

Current scope before roadmap.

A product discussion begins with what is available now, not a list of planned modules. We share the current build, deployment assumptions, and relevant roadmap detail directly with teams evaluating the product.

Request a technical review
Product questions

Before an evaluation.

What is Sortavex?

Sortavex is offensive security software under development for isolated and classified DoD environments. The current product work begins with TCP network reconnaissance inside the enclave.

Does Sortavex make external network calls?

The deployment model is designed without outbound internet dependencies. Updates and supporting data are brought into the environment through a controlled offline workflow.

How does Sortavex relate to Cordevan?

Cordevan supports defensive RMF, scanning, authorization, and continuous-monitoring work. Sortavex is being developed for offensive assessment activity. Both are intended for on-premises use in disconnected environments.

What is available today?

TCP network reconnaissance is the current product phase. Additional modules remain under development, so we confirm the available scope directly before discussing an evaluation.

Product discussion

Discuss the current Sortavex build.

Tell us about the enclave, assessment use case, and approval constraints. We will be direct about the current scope and whether it is ready for the evaluation you have in mind.

Start a product conversation