◆ Agent 04 · Reconnaissance

Map the whole battlefield.

VAUTHEYE reads a contract straight from the chain. It follows a proxy to the code that actually runs, walks the bytecode to list every function the contract exposes, and reports who still holds power over it. Live now on Robinhood Chain, Ethereum, Base, and BNB Chain.

Live now: bytecode mapping · proxy resolution · capability discovery · four chains

VAUTHEYE, reconnaissance scout agent
vautheye · recon feedillustration
GET dexter.cash
resolving DNS · fingerprinting stack ····
surface ▸ 3 subdomains · 11 open routes
signal ▸ exposed x402 quote endpoint
7 signals traced · handed to VAUTHRON

Live

Run it yourself.

This is the agent, not a demo of it. Give VAUTHEYE any address on Robinhood Chain and it reads the chain directly: bytecode, proxy layout, every function the contract exposes, and who still holds power over it. No scanner covers this chain, so nothing here is borrowed from anyone else.

What VAUTHEYE sees

Nothing moves unnoticed.

Full attack-surface mapping for any agent or domain
Subdomain and hidden-endpoint discovery
New agents and endpoints appearing on Virtuals
Exposed x402 quotes, secrets, and misconfigurations
Threat signals correlated across the network
A live directory the whole fleet queries

How it works

Scout. Trace. Hand off.

01

Point it at a target

Give VAUTHEYE a domain or let it sweep the Virtuals economy on its own. It resolves DNS and fingerprints the stack instantly.

recon · started
02

Map the surface

The agent enumerates subdomains, open routes, and exposed endpoints, building a live map of everything reachable.

3 subdomains · 11 routes
03

Hand off to the fleet

Threat signals are correlated and passed to VAUTHRON to exploit-test and VAUTHOR to audit, so recon turns into action.

7 signals traced

A living map, not a snapshot.

VAUTHEYE watches continuously. New agents, new endpoints, and new exposures on Robinhood Chain surface the moment they appear, so the fleet is never scanning yesterday's network.

threat feed · live
NEWnyx-agent.app · exposed quotetraced
MOVEoberon.finance · new subdomaintraced
SEENcygnus.trade · endpoint addedtraced
RISKluma-pay.io · secret in JS bundleflagged

One directory for the fleet.

Everything VAUTHEYE finds feeds a shared directory the other agents query, VAUTHRON to attack, VAUTHOR to audit, VAUTHEON to monitor. Recon is where every mission begins.

surface map
dexter.cash
├─ api.dexter.cash
├─ admin.dexter.cash · exposed
└─ /api/v1/swap · /api/quote · /api/settle
▸ handed to VAUTHRON + VAUTHEON

Access

Scout free. Watch on subscription.

Recon

On-demand surface mapping and threat scan for a single target.

$5 / scan
  • Attack-surface map
  • Subdomain discovery
  • Exposed-endpoint detection
  • Continuous watch
  • Threat feed
  • Fleet hand-off
Recommended

Watchtower

Continuous monitoring with a live threat feed and fleet hand-off.

$39 / month
  • Everything in Recon
  • Continuous 24/7 watch
  • Live threat feed
  • New-agent alerts
  • Automatic hand-off to the fleet
  • Shared directory access

Stake $VAUTH for up to 50% off and priority signals.

Questions & answers

VAUTHEYE performs passive and light-touch reconnaissance on publicly reachable surfaces. Active exploit testing only happens through VAUTHRON, and only against a domain you've verified you own.

VAUTHEYE maps and watches, it finds what's out there. VAUTHRON attacks what VAUTHEYE finds. Together they turn discovery into verified findings.

Continuous sweeps across the Virtuals economy on Robinhood Chain, new agents, changed endpoints, exposed secrets, and correlated signals, updated in real time.

Yes. Findings feed a shared directory the whole fleet queries, so recon automatically kicks off pentests, audits, and monitoring.

Deploy the fleet

See it before it sees you.

Let VAUTHEYE map the surface so the rest of the fleet knows exactly where to look.

Watch it live

Roadmap

What is built, and what is not.

Everything above the Live section runs today and you can check it yourself. The wider capabilities described further down this page, endpoint and subdomain discovery across the wider Virtuals economy, are the direction we are building in and are not live yet. We would rather label the gap than let you find it.