Glossary
Scope enforcement
Scope enforcement is the check that an action is aimed at a target the customer authorized, performed at the moment the action runs.
How does scope enforcement work in Seccuti?
The check is target bound rather than project bound: it is not enough that the engagement has some in scope assets, the specific target of this specific action must be one of them. A hostname that resolves to an address outside the declared range is refused even though the name was allowed, which is what closes the gap a redirect or a shared host would open.
See the idea running.
Set an envelope and watch what it refuses.