> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.method.security/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.method.security/_mcp/server.

# Products

> Method's two products — Bastion for exposure management and Reaper for offensive operations.

Method organizes its capabilities into two products that cover the full spectrum of security: **Bastion** for defense and **Reaper** for offense.

---

## Bastion

Bastion is an operating system for exposure management. It enumerates and assesses complex environments across cloud, on-premises, and internet-facing assets to build a dynamic understanding of risk.

Bastion structures environmental data into an [Ontology](/platform/core-platform/objects) linking hosts, applications, and vulnerabilities, enabling contextual risk assessment and attack path discovery. Its findings can be used directly or passed to Reaper to validate risks through simulated offensive actions.

![Bastion](/_fern-img/ef246d5c0e68151da9aba9ccbb99d094ec2757accfa2aa67799b9ca4ab9491e5.webp)

### What Bastion delivers

* **Cross-environment visibility**: View risk across your entire organization, from individual assets to enterprise-wide patterns
* **Continuous assessment**: Automated [Tasks](/platform/core-platform/automations) run on schedule to keep your digital twin current
* **Risk categorization**: Findings are classified by type (Cloud, Network, Application, Infrastructure, OSINT) and tracked with 12-week trends
* **Investigation and triage**: Drill from high-level scorecards down to individual [Objects](/platform/core-platform/objects) and [Findings](/platform/core-platform/findings)

### Bastion applications

Bastion brings together [Agents](/platform/core-platform/agents), [Explorer](/platform/core-platform/objects), [Findings](/platform/core-platform/findings), and [Automator](/platform/core-platform/automations).

---

## Reaper

Reaper is an operating system for offensive operations. It is a workspace for executing offensive cyber operations, supporting workflows like red teaming, adversary emulation, and mission rehearsal.

Reaper combines autonomy, powerful tooling, and operator-defined guardrails to help operators simulate real-world threats and run complex campaigns.

![Reaper](/_fern-img/46305d14ac9e21cb06e9849b287b9ed4c73a25ec1a625bb6bf5f0a1c6863f724.webp)

### What Reaper delivers

* **Adversary Emulation**: Launch [Operations](/platform/core-platform/operations) that mirror how real adversaries behave in the wild, across reconnaissance, lateral movement, exploitation, and more
* **Train and test teams**: Simulate realistic adversary behavior to evaluate team readiness, test detections, or benchmark controls
* **AI-assisted and human-controlled**: Toggle between Manual, Copilot, and Full Auto modes with configurable guardrails
* **Mission replay**: Return to any session to review actions taken, Objects created, and Findings surfaced
* **Validate Bastion discoveries**: Determine whether exposures discovered in Bastion are truly exploitable

### Reaper applications

Reaper brings together [Agents](/platform/core-platform/agents), [Operator](/platform/core-platform/operations) (the operation workspace), [Overwatch](/platform/core-platform/overwatch) (CLI for multiplayer operations), [Adversaries](/platform/core-platform/operations), and Reporting for powerful offensive capabilities.

---

## How they work together

Bastion and Reaper are complementary. Bastion maps and monitors your attack surface; Reaper validates whether those exposures are truly exploitable. Findings from Reaper flow back into Bastion's Ontology, enriching the overall picture of risk.

Both products share the same underlying platform: the same [Tools](/platform/core-platform/tools), [Objects](/platform/core-platform/objects), [Findings](/platform/core-platform/findings), and [Data Architecture](/platform/architecture/data). This shared foundation means that data collected in one product is immediately available in the other.