# The Hounds — Pack Playbook

> A skill-packaged playbook for The Hounds — 18 exposure-management specialists that hunt, tag, and calibrate risk over Tenable navi.

- Type: Playbook
- Author: packetchaos
- License: MIT
- Trust tier: contributed (passed automated validation and a baseline maintainer review)
- Last reviewed: 2026-07-17
- Source repository: https://github.com/packetchaos/the-hounds-harness
- Repo state: not archived
- Last push: 2026-07-15T18:18:48Z
- Stars: 1 (a popularity signal, not a safety signal)
- Forks: 0 (a popularity signal, not a safety signal)
- Open issues: 0
- Health checked at: 2026-11-05T20:35:15.821Z
- Integrations: Tenable, Anthropic
- Domains: vulnerability-management
- Tags: tenable, exposure-management, navi, playbook, claude-skills, asset-tagging, vulnerability-management
- Date added: 2026-07-15
- Playbook type: standard
- Agent chain:
  1. Laelaps (info), Finds and tags CISA KEV (known exploited) exposure.
  2. Certania (info), Tracks certificate expiry and weak crypto.
  3. Heimdall (info), Assesses post-quantum readiness.
  4. Fenrir (info), Chains signals into ranked attack paths (foothold to crown jewel).
  5. Cerberus (info), Confidence-scored IoT / OT / embedded device discovery.
  6. Pythia (info), Discovers and governs AI/ML inventory across five sources.
  7. Atlas (info), Establishes asset ownership.
  8. Mimir (info), Software inventory.
  9. Charon (info), Flags end-of-life / unsupported software.
  10. Anubis (info), Calibrates Asset Criticality Rating (ACR).
  11. Chronos (info), Scan health monitoring.
  12. Sirius (info), Agent group analysis.
  13. Garmr (info), Tag removal and cleanup.
  14. Orthrus (info), Maps findings to MITRE ATT&CK.
  15. Argus (info), Custom application discovery.
  16. Argos (info), Single-asset deep-dive.
  17. Sphinx (info), 'On the Scent' environment overview.
  18. Covenant (info), Enforces the AI Contract governance policy.
- Listing page: https://exchange.tenable.com/playbooks/the-hounds-pack-playbook
- Source file: https://github.com/tenable/cyberagents-exchange/blob/main/playbooks/the-hounds-pack-playbook.md

The Hounds is a pack of exposure-management specialists — "hounds" — that run over
[Tenable **navi**](https://github.com/packetchaos/navi) (`navi.db` + the Tenable API). This
repository packages the pack as a Claude skill (`the-hounds/SKILL.md` plus `references/`):
the domain knowledge for what each hound looks for, how it tags it, and which navi selector
it uses.

## What it does

Each hound hunts one kind of exposure and then tags it, calibrates its risk, or answers a
question — from CISA KEV (Laelaps) and attack paths (Fenrir) to IoT/OT (Cerberus), AI
inventory (Pythia), certificates (Certania), EOL software (Charon), and ACR calibration
(Anubis). You can run a hound by name ("run Laelaps") or "release the hounds" to run the
whole pack.

## How it works

The playbook follows a strict operating doctrine: grounded (answer only from real navi
results), propose-then-confirm for every write (show the exact command, `category:value`,
and matched-asset count; platform writes also require `NAVI_MCP_ALLOW_WRITES=1`), prefer
built-in selectors, distinguish ephemeral vs persistent tags, surface blind/uncredentialed
coverage, and verify after writing. Pair it with the navi skills
(navi-core, navi-enrich, navi-explore, navi-mcp) that supply the tool mechanics.

This is the Markdown version of one of 140 listings on CyberAgents Exchange. The same listing as JSON: https://exchange.tenable.com/api/playbooks/the-hounds-pack-playbook.json. The full index and how to read it: https://exchange.tenable.com/llms.txt