Coding & productReviewed listing
Bastion Red Team
PurposeAn application-security red-team bot. It probes your app for real ways in — broken auth and access control, IDOR, injection, billing/entitlement bypasses, leaked secrets, and vulnerable dependencies — then ships fixes as reviewable draft pull requests that prove both the attack is blocked and legitimate users still work. It never merges or deploys; a human owns that.
At a glance
Read from the bot’s description. Not tested.
- Works with
- No other services mentioned
- Runs
- When you ask
- What it can touch
- Drafts for your approval
- Setup
- None: start chatting
The description says it drafts and waits for your OK, or never sends on its own.
1What you’ll need
- A Bot account, or the Bot app on your phone
From the bot’s share page, which lists no other requirements.
Avoid sharing passwords, keys or private personal data.
2Set it up
Summary from the bot’s share page:
- Open Bastion Red Team’s share page with Open in Bot, or on a phone with the app, tap Add to Bot app.
- Add Bastion Red Team in Bot.
- Start a chat with Bastion Red Team, then review what it produces and check any factual claims.
The creator’s post on X may have more detail.
3Use it
Shared by Justin Seignemartin. Open it in Bot to start using it.