Products
Method organizes its capabilities into two products that cover the full spectrum of security: Bastion for defense and Reaper for offense.
Bastion
Bastion is an operating system for exposure management. It enumerates and assesses complex environments across cloud, on-premises, and internet-facing assets to build a dynamic understanding of risk.
Bastion structures environmental data into an Ontology linking hosts, applications, and vulnerabilities, enabling contextual risk assessment and attack path discovery. Its findings can be used directly or passed to Reaper to validate risks through simulated offensive actions.
What Bastion delivers
- Cross-environment visibility: View risk across your entire organization, from individual assets to enterprise-wide patterns, using the Bastion Dashboard
- Continuous assessment: Automated Tasks run on schedule to keep your digital twin current
- Risk categorization: Issues are classified by type (Cloud, Network, Application, Infrastructure, OSINT) and tracked with 12-week trends
- Investigation and triage: Drill from high-level scorecards down to individual Objects and Issues
Bastion applications
Bastion brings together Agents, Bastion Dashboard, Explorer, Issues, and Automator.
Reaper
Reaper is an operating system for offensive operations. It is a workspace for executing offensive cyber operations, supporting workflows like red teaming, adversary emulation, and mission rehearsal.
Reaper combines autonomy, powerful tooling, and operator-defined guardrails to help operators simulate real-world threats and run complex campaigns.
What Reaper delivers
- Adversary Emulation: Launch Operations that mirror how real adversaries behave in the wild, across reconnaissance, lateral movement, exploitation, and more
- Train and test teams: Simulate realistic adversary behavior to evaluate team readiness, test detections, or benchmark controls
- AI-assisted and human-controlled: Toggle between Manual, Copilot, and Full Auto modes with configurable guardrails
- Mission replay: Return to any session to review actions taken, Objects created, and Issues surfaced
- Validate Bastion discoveries: Determine whether exposures discovered in Bastion are truly exploitable
Reaper applications
Reaper brings together Agents, Operator (the operation workspace), Overwatch (CLI for multiplayer operations), Adversaries, and Reporting for powerful offensive capabilities.
How they work together
Bastion and Reaper are complementary. Bastion maps and monitors your attack surface; Reaper validates whether those exposures are truly exploitable. Findings from Reaper flow back into Bastion’s Ontology, enriching the overall picture of risk.
Both products share the same underlying platform: the same Tools, Objects, Issues, and Data Architecture. This shared foundation means that data collected in one product is immediately available in the other.
