Documentation

Run it, connect it, drive it.

Rokkhe is an autonomous pentester and a governed agentic SOC sharing one workspace. These pages cover getting it running, pointing your existing tools at it, operating it from the CLI or a coding agent, and the boundaries it keeps while doing so.

Start here

OverviewWhat Rokkhe does, and the loop it runs.QuickstartFrom nothing to a first proven finding.

Interfaces

CLI referenceDrive an engagement from your terminal or your pipeline.Agent surfaceDrive the SOC from a coding agent.

Ingestion

CollectorsPoint your existing security telemetry at Rokkhe.SOC pipelineHow an event becomes a case with evidence behind it.

Operations

Self-hostingRun the whole platform inside your own boundary.Security modelWhat is isolated from what, and where a decision needs a person.