Docs Bolt
Bolt documentation
Defensive analysis and authorized testing with evidence, cases, and reviewable output.
Start with Bolt overviewStart here
Using Bolt
Core conceptsMode, case context, assets, evidence, investigations, and activity are the mental model.Read more Investigation workflowA repeatable loop through frame, collect, analyze, decide, validate, and record, plus a prompt pattern that works.Read more Defensive analysis in depthTriage, IOC work, detection engineering, IR, prioritization, and threat intel in Defensive mode.Read more Authorized testing in depthThreat modeling, assessment planning, and safe validation inside a documented authorization boundary.Read more Evidence standards and handlingWhat to include, what to redact, supported files, and prompt-injection hygiene.Read more Bolt CLI for terminal and VS CodeInstall once, log in, then run and build from any terminal — including VS Code.Read more Continuous monitoring with SentinelA read-only watcher on your server plus AI triage on anomalies: what it checks, what it costs, what it cannot do.Read more Watch policies and permissionsDeny-by-default responses, explicit playbooks, approvals, and the kill switches — nothing runs without your say-so.Read more Watch alerts: email and inboxSeverity levels, what each alert carries, acknowledge/resolve, and why repeats do not re-email you.Read more