Reconnaissance
Maps your domain, subdomains, exposed services and public footprint.
Begize OptiMAX · AI Security
Blacksmith V2.0
Give us your domain, and we will find the rest.
A team of specialist AI agents works in parallel to test your systems, validates every finding with evidence and hands your team a remediation plan. Continuous, not once a year.
Testing is conducted only on systems and files you own or are explicitly authorized to test, with human oversight throughout.
100+
Industry-standard security tools integrated
10+
Specialist agent stages working in parallel
Evidence-led
Validated findings with remediation guidance
How it works
One orchestrator. Specialist agents. All working in parallel.
Blacksmith V2.0 coordinates specialist agents across the full assessment lifecycle. Instead of following a fixed script, they plan, delegate and adapt to what they find, using more than 100 industry-standard security tools.
Scanning & enumeration
Probes discovered assets to identify services, versions and entry points.
Vulnerability analysis
Identifies and prioritizes weaknesses across web apps, APIs and infrastructure.
Exploit validation
Confirms which findings are genuinely exploitable, within the agreed scope.
Post-exploitation
Assesses real impact: what an attacker could reach once inside.
Reverse engineering
Analyzes authorized APKs, Windows and Linux executables, shell scripts and C programs.
100+ industry-standard tools, one coordinated team
Agents run the tools your security team already trusts inside isolated sandboxes, then combine their output into one picture. Every tool call, delegation and decision is recorded, so each finding can be traced back to its evidence.
What it covers
From your domain to a fix list.
Start with a domain or a defined scope. Blacksmith V2.0 discovers the surface, tests it and reports what matters.
Web · API · Network · Binaries and mobile apps
- Attack surface & domain discovery
- Web application penetration testing
- API penetration testing
- Network & infrastructure scanning
- Vulnerability assessment & prioritization
- Exploit validation
- Post-exploitation impact assessment
- APK & binary reverse engineering
- Evidence-led reporting
- Remediation guidance
- Full audit trail of agent activity
- And more, tailored to your scope
Standards
Aligned with the standards security teams already use.
Blacksmith V2.0's workflows and reporting are aligned with recognized security testing methodologies and frameworks, so results fit into the way your team and your auditors already work.
PTES
Penetration Testing Execution Standard
Engagement structure from scoping and intelligence gathering through exploitation and reporting.
OWASP WSTG
Web Security Testing Guide
Structured, repeatable coverage for testing web applications and their attack surface.
NIST SP 800-115
Technical Guide to Information Security Testing
Planning, executing and reporting technical security assessments in a defensible way.
ISO/IEC 27001
Information security management
Scoped testing and audit-ready evidence that support an organization's security management and assurance needs.
Alignment describes the methodologies our workflows follow. It does not represent certification or endorsement by the standards bodies.
Open-source research
Blacksmith V1.0
Blacksmith V1.0 is the open-source framework and research project. It explores orchestrated multi-agent penetration-testing workflows and is the public technical reference behind our work.
Two distinct offerings
- Blacksmith V1.0
- Open-source framework for research, learning and community use.
- Blacksmith V2.0
- Begize OptiMAX’s product for organizations, deployed in your own infrastructure and scoped through a demo and engagement discussion.
See what Blacksmith finds on your domain.
Tell us about your environment, assessment needs or software-analysis use case.