Riposte

An agentic TUI built for cybersecurity

Claude Code, Codex and opencode are made for writing software. Riposte is made for defending it: recon, triage, reproduction and remediation, in one terminal interface.

Private development · no public install yet

A session, start to handoff

Switch stages to inspect a representative investigation.

riposte · acme-corp.com · passive◉ local
▌ scope acme-corp.com --passive
plan · 4 steps · no traffic to target
 
[1/4] certificate transparency 38 hostnames
[2/4] passive dns + asn ranges 6 netblocks
[3/4] tech fingerprint (archived) 19 identified
[4/4] deduplicate + rank 27 in scope
 
notable
legacy-sso.acme-corp.com idp, last cert 2019
jenkins.ops.acme-corp.com ci, public login
s3-backups.acme-corp.com cname → bucket
 
written ./runs/2026-08-22-acme/scope.json
Scope
acme-corp.com
Mode
passive
Hosts
27 in scope
Gates
none pending
Run
2026-08-22-acme
passive mode⇥ panes · / commands · ? help

Representative product design · not a recorded customer run

Plan

Objectives become a reviewable plan of tool calls with explicit scope boundaries.

Execute

Riposte drives tools on your machine and pauses at every step marked as gated.

Report

Every run ends as findings, evidence, commands, and a ticket ready to hand off.