How 545e/snmk works
SNMK is an autonomous cybersecurity assessment and operations platform. Its main workflow accepts an authorized target and scan configuration, governs scope, coordinates specialist agents and scanners, and produces findings for persistence, scoring, remediation, and reporting. Separate product branches provide network intelligence and forensics, cyber kill-chain analysis, integrations, and AI-assisted reasoning. The sampled sources show the web/API entry points and parts of orchestration; some subsystem links are documented only by the README or SOURCE INDEX, so unverified call paths are omitted.
Main entry points: server.py Web API · orchestrator.py Assessment orchestrator · database.py Platform database · llm_client.py AI reasoning
Components 20
Product Entry
- Web API
web/server.py - Versioned API
web/v1/router.py
Assessment Workforce
- Scope governance
core/scope_policy.py - Assessment orchestrator
agents/orchestrator.py - Specialist agents
agents/agent_workforce.py - Asset discovery
agents/amass_engine.py - Scanner adapters
core/scanner_integrations.py - OWASP plugins
plugins/owasp_plugins.py
Security Operations
- Findings and scoring
core/scoring.py - Remediation
core/remediation_engine.py - Security reports
reports/generator.py - Kill-chain analysis
core/kill_chain/engine.py - Digital forensics
core/forensics_engine.py - Network intelligence
core/network/geo_engine.py
Shared Platform
- Provider integrations
core/integrations/registry.py - AI reasoning
core/llm_client.py - Platform database
core/database.py - Event queue
core/queue_manager.py - Agent registry
core/agent_registry.py
Other components
- Security users
Connections 24
- Security users → Web API: submits requests
- Web API → Assessment orchestrator: starts assessments
web/server.py - Security users → Versioned API: uses API
- Versioned API → Assessment orchestrator: routes assessments
web/v1/router.py - Assessment orchestrator → Scope governance: checks scope
agents/orchestrator.py - Assessment orchestrator → Specialist agents: coordinates
agents/orchestrator.py - Assessment orchestrator → Scanner adapters: runs scans
agents/orchestrator.py - Assessment orchestrator → Asset discovery: incorporates assets
agents/orchestrator.py - Agent registry → Specialist agents: discovers agents
core/agent_registry.py - Assessment orchestrator → Event queue: emits events
agents/orchestrator.py - Assessment orchestrator → Platform database: synchronizes state
agents/orchestrator.py - Web API → Platform database: reads and writes
web/server.py - Scanner adapters → Scope governance: enforces scope
core/scanner_integrations.py - Web API → OWASP plugins: offers audit plugins
web/server.py - Web API → Findings and scoring: scores findings
web/server.py - Findings and scoring → Remediation: guides fixes
- Web API → Security reports: generates reports
web/server.py - Web API → Kill-chain analysis: routes analysis
- Kill-chain analysis → Platform database: persists analysis
- Web API → Digital forensics: offers forensics
web/server.py - Web API → Network intelligence: offers network tools
- AI reasoning → Provider integrations: gets credentials
core/llm_client.py - Provider integrations → Platform database: persists settings
core/integrations/registry.py - AI reasoning → Platform database: grounds responses
core/llm_client.py