The Academy is free // the war room is optional
DAEMONCORE // ACADEMY

DAEMONCORE FIELDOPS // WAR ROOM

AUTHORIZED OPERATIONS
HAVE A COMMAND CENTER.

FieldOps transforms explicitly authorized security work into named engagements with signed scope, exact target boundaries, professional diagnostics, multi-target campaigns, sealed evidence, findings, retesting and client-ready reporting.

UNLOCK FIELDOPS — $29EXPLORE THE WAR ROOM

A FieldOps license unlocks the software. It does not authorize a target. Operate only on systems you own or have explicit written permission to test.

FOUNDERS SPECIAL
$29REGULARLY $199

One-time payment

Lifetime FieldOps access

3 PC activations

UNLOCK FIELDOPS — $29

Secure checkout // Lemon Squeezy

Image slot // DaemonCore-FieldOps-War-Room-Retail.png

OPERATIONS CONTROL

EVERY ENGAGEMENT HAS A NAME,
SCOPE AND RECEIPT.

The example below uses clearly synthetic values. FieldOps binds the operator, the approving authority, the exact allowlist and the declared port boundary before any action runs.

OPERATION PERMIT // ENG-2026-0117SIGNED
OPERATOR
verifying…
CLIENT
verifying…
ENGAGEMENT
verifying…
APPROVING AUTHORITY
verifying…
AUTHORIZATION WINDOW
verifying…
PERMIT STATE
verifying…
TARGET ALLOWLIST
verifying…
DECLARED TCP PORTS
verifying…
POLICY LEVEL
verifying…
EVIDENCE CHAIN
verifying…
EMERGENCY STOP
verifying…

CAPABILITY GRID

ONE CONTROL PLANE.
THE COMPLETE ENGAGEMENT.

  • 01

    Engagement Vault

    Named engagements, authorization records, targets, ports, testing windows and durable case files.

  • 02

    Signed Operation Permits

    Operator identity, approving authority, client, rules-of-engagement reference, targets, policy and validity window bound into the permit.

  • 03

    Deep Service Inventory

    Authorized service and version evidence through local Nmap, Docker or the native fallback profiler.

  • 04

    DNS, HTTP and TLS Evidence

    DNS control-plane records, HTTP security posture, cookie controls, implementation disclosure and certificate identity.

  • 05

    Bounded Web Map

    A controlled survey of approved application paths without uncontrolled crawling or response-body collection.

  • 06

    Campaign Engine

    Fixed professional assessment modules across as many as 100 explicitly authorized targets and 128 declared TCP ports.

  • 07

    Change Intelligence

    Compare prior and current captures to expose new services, removed services, TLS changes, DNS drift and response changes.

  • 08

    Evidence Vault

    SHA-256-sealed captures linked directly to operations, findings, reports and retests.

  • 09

    Findings and Retesting

    Track impact, affected assets, evidence, remediation ownership and verification through closure.

  • 10

    Client-Ready Reporting

    Transform engagement evidence into defensible summaries, findings and remediation records.

  • 11

    Hash-Chained Operations Ledger

    Completed, blocked, paused and failed actions remain attributable and tamper-evident.

  • 12

    Chaos Engine

    Bounded resilience experiments with request ceilings, concurrency limits, SLO aborts, recovery measurement and emergency stop.

OPERATION FLOW

FROM AUTHORIZATION
TO CLOSURE.

  1. 01 //

    IDENTIFY

    Bind the named operator and device identity.

  2. 02 //

    AUTHORIZE

    Record the approving authority, client, written authorization and testing window.

  3. 03 //

    DEFINE

    Declare the exact targets, ports, network boundary and operating policy.

  4. 04 //

    EXECUTE

    Run professional diagnostics and approved campaign modules.

  5. 05 //

    SEAL

    Bind every result to evidence and the append-only operations ledger.

  6. 06 //

    REPORT

    Produce findings, remediation guidance and client-ready reports.

  7. 07 //

    RETEST

    Verify that remediation changed the security condition.

  8. 08 //

    CLOSE

    Export the complete attributable case file.

CAMPAIGN ENGINE

MULTI-TARGET WORK
WITHOUT LOSING CONTROL.

Campaign Engine coordinates fixed assessment modules through the same target pinning, network-boundary validation, authorization window and evidence controls used by every manual FieldOps action.

CAMPAIGN CONTROL BOARDBOUNDED
  • QUEUED—
  • RUNNING—
  • COMPLETED—
  • FAILED—
  • PAUSED—
  • CANCELLED—
  • EVIDENCE SEALED—
  • FINDING CREATED—
  • RETEST REQUIRED—
AUTHORIZED TARGETS PER CAMPAIGNUP TO 100
DECLARED TCP PORTSUP TO 128
MODULE SETFIXED // NO ARBITRARY COMMANDS

CHAOS ENGINE

BREAK ASSUMPTIONS.
MEASURE RECOVERY.

AUTHORIZED EXTERNAL OPERATIONS
  • Maximum 4 requests per second
  • Maximum 4 concurrent probes
  • Maximum 240 total requests
  • Live SLO aborts
  • Emergency stop
  • Recovery measurement
  • Sealed evidence
SEALED ACADEMY POWER DOMAIN
  • Maximum 500 requests per second
  • Maximum 100 workers
  • Maximum 30,000 requests
  • Disposable bundled target only
  • No internet egress
  • No host mounts
  • No published target ports
  • Automatic teardown

External resilience experiments are rate-ceilinged, abortable and evidence-sealed measurements of recovery behaviour on systems inside your attested authorization boundary. Unrestricted load work stays inside the disposable, egress-free Academy power domain.

TRUST AUTHORITY

ATTRIBUTION IS PART
OF THE EVIDENCE.

  • Device-protected Ed25519 operator identity
  • Signed engagement permits
  • Named approving authority
  • Cryptographically bound scope
  • Signed operation receipts
  • Timestamped attribution
  • Hash-chained ledger
  • Tamper-evident exports

DaemonCore Trust Authority provides device-key attribution and tamper-evident records. It does not independently verify that a typed identity or authorization claim is truthful, and it never replaces written permission from the system owner.

THE DISTINCTION

ACADEMY IS FREE.
THE WAR ROOM IS OPTIONAL.

DaemonCore Academy

  • Free cybersecurity training
  • 127 practical lessons
  • 120+ guided hours
  • Interactive workbenches
  • Disposable Docker ranges
  • Evidence-led mastery
  • No purchase required

FieldOps War Room

  • Paid professional operations layer
  • Real authorized targets
  • Signed engagement scope
  • Professional diagnostics
  • Multi-target campaigns
  • Sealed evidence
  • Findings and retesting
  • Client-ready reporting
  • Controlled resilience testing

FOUNDERS SPECIAL // LIMITED-TIME LAUNCH PRICING

ENTER THE WAR ROOM FOR $29.

One payment unlocks the complete FieldOps War Room on three PCs. The Academy remains free. The engagement remains yours. The evidence stays attributable.

$199$29

One-time payment

Lifetime access

3 PC activations

UNLOCK FIELDOPS — $29 FOUNDERS SPECIALDOWNLOAD THE FREE ACADEMY

FIELDOPS FAQ

LICENSE, SCOPE
AND LIMITS.

Is this a subscription?

No. FieldOps is a one-time license purchase. There is no renewal and no recurring charge.

What does the $29 Founders Special include?

Full FieldOps War Room access — engagement vault, signed permits, diagnostics, Campaign Engine, evidence vault, findings and retesting, reporting, operations ledger and the bounded Chaos Engine.

How many PCs can I activate?

The license covers 3 PC activations.

Is the Academy still free?

Yes. DaemonCore Academy — all 127 lessons and every sealed range — stays free. No account, no card.

Does buying FieldOps authorize me to test a target?

No. A license unlocks the software only. Authorization comes from the system owner in writing, and FieldOps enforces the scope you declare.

Can FieldOps test real systems?

Yes — public external systems, or exact internal systems when they are explicitly included in an active, attested engagement. FieldOps enforces the declared targets, ports, network boundary and testing window.

What happens when the Founders Special ends?

FieldOps returns to its regular $199 one-time price. Licenses bought during the launch window remain valid.

Does FieldOps include future updates?

Updates are published as new releases through the same official release channel used today. Nothing beyond the current licensing terms is promised here.

What is the difference between FieldOps and the sealed Academy ranges?

Academy ranges are disposable, contained targets built for learning. FieldOps operates against real systems inside an attested authorization boundary and seals the resulting evidence.

Where is engagement data stored?

Locally on your machine. Engagements, evidence captures and the operations ledger are local-first artifacts you export yourself.