Skip to main content
Playbooks / The Hounds — navi-agents

The Hounds — navi-agents

Contributed

The executable harness for The Hounds — a local console that runs the exposure-management agent pack over Tenable navi.

Authorpacketchaos
LicenseMIT
AddedJul 15, 2026
View on GitHub →

Agent Chain

  1. 1.Laelaps

    Finds and tags CISA KEV (known exploited) exposure.

    Manual Step
  2. 2.Certania

    Tracks certificate expiry and weak crypto.

    Manual Step
  3. 3.Heimdall

    Assesses post-quantum readiness.

    Manual Step
  4. 4.Fenrir

    Chains signals into ranked attack paths (foothold to crown jewel).

    Manual Step
  5. 5.Cerberus

    Confidence-scored IoT / OT / embedded device discovery.

    Manual Step
  6. 6.Pythia

    Discovers and governs AI/ML inventory across five sources.

    Manual Step
  7. 7.Atlas

    Establishes asset ownership.

    Manual Step
  8. 8.Mimir

    Software inventory.

    Manual Step
  9. 9.Charon

    Flags end-of-life / unsupported software.

    Manual Step
  10. 10.Anubis

    Calibrates Asset Criticality Rating (ACR).

    Manual Step
  11. 11.Chronos

    Scan health monitoring.

    Manual Step
  12. 12.Sirius

    Agent group analysis.

    Manual Step
  13. 13.Garmr

    Tag removal and cleanup.

    Manual Step
  14. 14.Orthrus

    Maps findings to MITRE ATT&CK.

    Manual Step
  15. 15.Argus

    Custom application discovery.

    Manual Step
  16. 16.Argos

    Single-asset deep-dive.

    Manual Step
  17. 17.Sphinx

    'On the Scent' environment overview.

    Manual Step
  18. 18.Covenant

    Enforces the AI Contract governance policy.

    Manual Step

Integrations

TenableAnthropic

Tags

tenableexposure-managementnaviplaybookpythonconsolevulnerability-management

The Hounds — navi-agents is the executable harness for the pack: a local console (navi-agents/) that runs the exposure-management hounds over Tenable navi (navi.db + the Tenable API) and surfaces the results in the browser. It runs on a stock Python install — the default server needs no third-party packages.

What it does

It executes the same pack of specialists as a program rather than a skill: CISA KEV (Laelaps), attack paths (Fenrir), IoT/OT (Cerberus), AI inventory (Pythia), certificates (Certania), EOL software (Charon), ACR calibration (Anubis), and the rest. Each hound hunts one kind of exposure and proposes navi tag/ACR writes for human approval; writes are disabled by default (NAVI_ALLOW_WRITES=0).

How it works

Launch with python3 run.py (zero-dependency stdlib server, or optional FastAPI/Flask). On first run it builds a bundled sample database so you can evaluate it with no setup; for production, point NAVI_DB_PATH at navi’s real navi.db. The core/ engine provides the shared detection, discovery, health, MITRE, and EOL logic, and core/agents/ holds the individual hound implementations. Every write stays grounded in real navi data and gated behind explicit confirmation.