> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.method.security/guides/best-practices/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.method.security/_mcp/server.

# Best Practices

> Documentation for the Method Platform

## Docs

- [Continuous Challenge overview](https://docs.method.security/guides/best-practices/continuous-challenge/overview.md): Maturity stages for continuously validating your external and multi-domain attack surface.
- [Black Box External Assessment](https://docs.method.security/guides/best-practices/continuous-challenge/black-box-external-assessment.md): Inventory validated paths to compromise with always-on, trusted autonomy.
- [Continuous External Challenge](https://docs.method.security/guides/best-practices/continuous-challenge/continuous-external-challenge.md): Run validated Findings through PoC and exploitation under Rules of Engagement you control.
- [Offensive Operations overview](https://docs.method.security/guides/best-practices/offensive-operations/overview.md): Maturity stages for running offensive engagements with Method.
- [Operator Augmentation](https://docs.method.security/guides/best-practices/offensive-operations/operator-augmentation.md): Capture an Operator's terminal-first workflow in Method. Every command, output, and discovery streams into the Platform with AI suggestions and Object Findings attached as it happens.
- [Selective Auto Assume Breach](https://docs.method.security/guides/best-practices/offensive-operations/selective-auto-assume-breach.md): Run an assume-breach engagement inside Operator. A Jackal on the foothold, Method Tools, the Ontology, and Copilot Chat in one workspace, with you driving every decision.
- [At Scale Adversary Emulation](https://docs.method.security/guides/best-practices/offensive-operations/at-scale-adversary-emulation.md): Hand execution to an Operator AI agent emulating a specific Adversary, inside an Operation Plan and Rules of Engagement you approved going in.
- [Developer overview](https://docs.method.security/guides/best-practices/developer/overview.md): Maturity stages for building custom capabilities on top of Method.
- [Operator-defined Tools](https://docs.method.security/guides/best-practices/developer/operator-defined-tools.md): Bring your own tradecraft into Method as a first-class Tool, with a Compiler that runs it and a Processor that turns its output into Ontology Objects.
- [Operator-defined Agents](https://docs.method.security/guides/best-practices/developer/operator-defined-agents.md): Express your tradecraft as AI Agents that assist your work in context or scale it autonomously across Method.
- [All Workflows](https://docs.method.security/guides/best-practices/all-workflows.md): The complete map of Method best practice workflows across every discipline.