Skip to content
Documentation

Rokkhe documentation

Rokkhe is an autonomous pentester and a governed agentic SOC sharing one workspace. These pages cover getting it running, pointing your existing tools at it, operating it from the CLI or a coding agent, and the boundaries it keeps while doing so.

Start here

OverviewWhat Rokkhe does, and the loop it runs.QuickstartFrom nothing to a first proven finding.

Interfaces

CLI referenceDrive an engagement from your terminal or your pipeline.Agent surfaceDrive the SOC from a coding agent.

Findings

RemediationOpen a finding's fix as a GitHub pull request or GitLab merge request, file it in Jira or Linear, or hand it to a coding agent.RetestsVerify a fix by replaying an accepted finding's proof and its bypass attempts, once a second reviewer approves.Compliance mappingSee which framework requirements your findings bear on, with links to the evidence, and export it for an assessor.

Ingestion

CollectorsPoint your existing security telemetry at Rokkhe.SOC pipelineHow an event becomes a case with evidence behind it.

Operations

Self-hostingRun the whole platform inside your own boundary.Security modelWhat is isolated from what, and where a decision needs a person.