curl -fsSL https://labs.strike48.com/install.sh | shmacOS / Linux. A Strike48 account is needed for first run;
stock Ubuntu needs curl (sudo apt install curl).
Guide
We're a small team that builds tools for people who are drowning in data, juggling too many interfaces, and wishing their infrastructure would just explain itself.
So we built a platform where AI agents talk to your systems, make sense of the noise, and actually do useful things. Then we open-sourced the pieces, because that's what you do.
Poke around. Break things. Build on top of what we've done.
How it works — the 30-second architecture tour
What's here — find the stuff you care about
Lab Notes — the latest from our lab notebook
Everything in Strike48 is built around hubs and connectors.
A connector is a standalone process that does one thing well — scan a network, manage Kubernetes clusters, run a C2 operation. It connects to a hub and waits for instructions.
A hub coordinates connectors. It's where you write workflows, chat with AI agents, and see what's happening across your infrastructure. Ask an agent "what's listening on this network?" and it knows to reach out to the right connector, assemble the results, and give you an answer.
The result: each tool stays small and focused, but together they form a platform where AI agents can actually do things in the real world.
AI-assisted engagements, network recon, built-in C2, and reporting that doesn't make you want to cry. From planning to deliverable.
Kubernetes cluster management and a unified desktop shell that puts all your tools in one window. Because alt-tabbing is not a workflow.
Autonomous agents, RAG-powered knowledge bases, and visual workflows. Point them at your data and let them figure it out.
Rust SDK, gRPC APIs, and a connector architecture that lets you plug anything into the platform. Your tool, our plumbing.
Scheduled ASOC pipelines create cases reliably, detection summaries get clearer, SAML certificates can be viewed and rotated, StrikeKit tracks blockers and cleans up findings automatically, workflow secrets stay hidden, dashboards gain dropdown variables, and Amazon S3 works.
Strike48
·
ASOCv2 introduces case tasks, scheduled jobs run reliably again, dark mode holds across refreshes, imported personas keep all their tools, and ASOC groups related alerts into cases more accurately.
Strike48
·
New tenants are usable the moment they're created, cloned and imported roles keep their feature access, ASOC groups related alerts into cases more accurately, workflow secrets are masked in run history, agents can send real file attachments, and StrikeKit gets redesigned settings and dashboards.
Strike48
·
Parallel workflow branches no longer drop results, scheduled jobs run reliably for every tenant, MCP tools work in Code Mode, plain-JavaScript workflow steps are editable in the Builder, and more.
Strike48
·
New FortiSIEM and Qualys VM/PC MCPs, fixes and upgrades across seven existing MCPs, automated multi-step StrikeKit workflows, session-reliability fixes, and more resilient per-tenant ASOC triage.
Strike48
·
Clearer SSO error handling, one-click role cloning and export/import, six Case Management reliability fixes, and more.
Strike48
·
Pick a path and start exploring. Or just read the Lab Notes — we won't judge.