Attack Map & Attack Chains
Path: /attack-map · Sidebar: Intelligence → Attack Map
Individual vulnerabilities rarely tell the whole story. The Attack Map performs multi-hop attack-chain inference over your unified vulnerabilities to reveal the paths an attacker could actually walk - and the toxic combinations that turn several medium issues into one critical breach.
What it computes
Using a deterministic capability graph over your vulnerabilities, apPosture discovers chains across the kill-chain stages:
entry → execute → credential access → privilege escalation → pivot → impact
- Attack chains / kill chains - ordered sequences of vulnerabilities that compose into a full exploit path.
- Toxic combinations - multi-step exploits that span services.
- Cross-service paths - how a foothold in one app reaches another.
- Lateral movement - bounded multi-app paths (up to four apps) across a project trust group to a crown-jewel, each hop a real pivot-capable finding.
- Choke points - the single vulnerabilities that, if fixed, break the most chains. These are your highest-leverage fixes.
Chains are ranked proof-first: any chain with a runtime- or exploit-confirmed
hop carries a RUNTIME PROVEN chip and floats above merely-reachable chains,
and the header stats include lateral-movement and runtime-proven counts. See
Attack Chains for the scoring and the live cross-finding
pivots that produce the proven hops.
Using the page
- View the graph of exploitable paths and select a chain to see each hop's contributing vulnerability and evidence.
- Identify choke points and fix those first to collapse many paths at once.
- Chains are also surfaced via the API:
GET /api/v1/graph/attack-chains.
A choke point fix can neutralise a dozen attack chains. Prioritise choke points over picking off individual leaf findings.