Security audits and threat detection — log review, vulnerability scans, and remediation with full traceability.
02Overview
Security agents run production audits, review logs, and deploy critical patches with traced diffs.
Findings compile into structured reports with severity tiers and remediation steps.
Critical actions require human approval; routine patrols run on schedule.
Scheduled production scans with findings attached to tickets.
CVE fixes deployed with unified diffs and rollout verification.
Follow-up tickets for IAM rotation and config hardening.
What security teams stitch together
SIEM, EDR, vuln scanners, GRC, and paging tools routinely exceed 1076/mo — while analysts still copy IOCs between tabs.
ok Trooper, triage this alert and draft the incident note. go.
On it. Watch me work 👇
Hosts, users, and IOC overlap
Playbook actions ready
Timeline started for IR
Scanning SIEM for the same IOC
Triage moving. Next alert arrives with context, not a blank page. Review board
ok you're officially hired. run this every week forever 🫡
03Playbooks
Vuln triage, access reviews, and incident runbooks — traced with GitHub, Slack, and Linear.
Sec lead gate04Capabilities
Each row is one clear capability — ask in chat, watch it run, approve before anything ships.
Log review and vulnerability checks land as clear findings with severity — not a wall of raw alerts.
Triage and rollback steps stay logged. Critical actions still need a human before they run.
Access rotation, config hardening, and verification run as checklists so fixes don’t evaporate after the incident channel goes quiet.
Audit results and remediation steps land in one review pack so critical actions get human eyes first.
08SecOps
Log review → findings report → patch diff on one mission.
Critical patches deployed with verification and postmortem notes.
Dormant keys and over-privileged roles flagged for rotation.
Audit evidence packs compiled from traced agent actions.
Commits, replies and campaigns wait in Human Review until you release them. Autonomy is a privilege you grant, not a default.
API keys are never stored on our servers. Every organization gets an isolated workspace with encrypted connections.
Self-host the whole workforce, or point it at local models. Enterprise adds SSO, private VPC and on-prem deployment.
Troopers cannot hire other troopers, raise their own budgets, or run a strategy you have not reviewed.
Every plan runs on a private server with your keys. No surprise bills on model usage — you pay providers directly.
1 workspace · no connected devices · free forever on your machine
BYO API keys — providers bill usage.
Team members
1 included
Workspaces
1 included
1 workspace · 2 team members · no connected devices
BYO API keys — providers bill usage.
Team members
2 included
Workspaces
1 included
2 team members included
Extra members $10/mo. BYO keys.
Team members
2 included
Workspaces
1 included
Volume pricing and dedicated support
Private deployment with custom agreements.
Team members
200 included
Workspaces
100 included
1 workspace · no connected devices · free forever on your machine
BYO API keys — providers bill usage.
Team members
1 included
Workspaces
1 included
1 workspace · 2 team members · no connected devices
BYO API keys — providers bill usage.
Team members
2 included
Workspaces
1 included
2 team members included
Extra members $10/mo. BYO keys.
Team members
2 included
Workspaces
1 included
Volume pricing and dedicated support
Private deployment with custom agreements.
Team members
200 included
Workspaces
100 included
everyone deserves a fully powered agentic system that does real work for them. that power should not sit only in the hands of big corporations — so we built trooper for you, and made it free for anyone to use. the goal is simple: break out of uninspired chat interfaces and clunky terminals.
— vaibhav
founder, trooper
Missing something? Email vaibhav@trooper.so.
Deploy Orders
Create AI agents that understand your business, work across your tools, and take work from idea to outcome.
Download apps
