Attack Map & Attack Chains

Path: /attack-map · Sidebar: Intelligence → Attack Map

Individual vulnerabilities rarely tell the whole story. The Attack Map performs multi-hop attack-chain inference over your unified vulnerabilities to reveal the paths an attacker could actually walk - and the toxic combinations that turn several medium issues into one critical breach.

What it computes

Using a deterministic capability graph over your vulnerabilities, apPosture discovers chains across the kill-chain stages:

entry → execute → credential access → privilege escalation → pivot → impact

• Attack chains / kill chains - ordered sequences of vulnerabilities that compose into a full exploit path.
• Toxic combinations - multi-step exploits that span services.
• Cross-service paths - how a foothold in one app reaches another.
• Choke points - the single vulnerabilities that, if fixed, break the most chains. These are your highest-leverage fixes.

Using the page

• View the graph of exploitable paths and select a chain to see each hop's contributing vulnerability and evidence.
• Identify choke points and fix those first to collapse many paths at once.
• Chains are also surfaced via the API: GET /api/v1/graph/attack-chains.

Fix the choke point, not the leaf

A choke point fix can neutralise a dozen attack chains. Prioritise choke points over picking off individual leaf findings.