Automatic Penetration Tests

How scheduled Hannibal hunts run from Settings → AI, what hunt profiles add, and when the card pauses or locks.

Automatic Penetration Tests

Automatic Penetration Tests is the Hannibal schedule for this tenant. It lives on Settings → AI, not on Attacks. Manual hunts from Insights still work when this switch is off.

What the switch does

When on, Guard starts hunts automatically when monthly Hannibal budget headroom is available. The backend already skips scheduled hunts at $0 remaining — you do not have to flip the switch off for that.

You can turn the feature on with zero hunt profiles. Profiles are optional named configurations (mandate, agent flavor, scope, aggressiveness). An empty list is valid.

Turning the switch on is the only change that asks for confirmation. Profile edits autosave.

Hunt profiles

Field	Meaning
Name	Label in the list. Defaults to Hunt N if left blank.
Agent	Default (Hannibal), Cloud infrastructure, Web application, or LLM application.
Mandate	The objective Hannibal pursues.
Scope	Starting assets / targets.
Aggressiveness	Cautious — narrow, one vulnerability at a time, does not follow leads. Balanced (default) — follows high-value leads and pivots when evidence warrants it. Aggressive — multi-hop chaining; confirmed chains are recorded as attack graphs on Attacks → Attack Paths.

You can reorder, edit, or remove profiles. The editor caps how many profiles you can add.

When the card is locked or paused

AI Autonomy must be on for this card to be editable. Autonomy is a Praetorian-managed org flag. If it is off, hunt visibility is off and this editor does not run. Read-only users never see hunts even when Autonomy is on.

Paused appears when the Hannibal category allocation is $0. Paused is display-only: this card does not turn the stored switch off from budget state. Scheduled hunts simply have no headroom.

If Guard cannot read the stored schedule, the card is display-only so a save cannot overwrite a live schedule with defaults.

Who can edit

Manage settings (Admin), and only while Autonomy is on.

Attacks vs Settings

Attacks is where hunt sessions and results show up. Settings → AI → Automatic Penetration Tests is where the recurring schedule is configured. Do not look for this switch under Attacks → Capabilities.