Skip to content
packetchaos edited this page Jul 21, 2026 · 22 revisions

navi

A Deterministic Agentic Engine and CLI for Exposure Management. Built on Tenable. Grounded in your data. Reproducible by design.

navi turns your Tenable exposure data into something an AI agent — or an engineer at a terminal — can act on with confidence. It syncs Tenable Vulnerability Management, Tenable One, and Tenable WAS into a local, queryable database, exposes every capability as a real tool, and ships a pack of expert agents (the Hounds) that hunt specific classes of exposure.

New here? Start with Deterministic Agentic Engine for the "why," then Install Navi and Getting Started for the "how."

The four pillars

  • CLI Reference — the deterministic engine: sync Tenable into navi.db, then query, tag, calibrate ACR, scan, export, and remediate with single commands.
  • MCP Server — exposes the engine to any MCP-capable AI (Claude and others) as typed tools, behind a write-gate so reads are always safe and actions are opt-in.
  • Skills — packaged best-practice playbooks that teach an agent how to drive navi well.
  • The Hounds — a pack of exposure-management agents, each trained on one kind of hunt.

Quick links

I want to… Go to
Understand the concept Deterministic Agentic Engine
Install navi Install Navi · Docker Deployment
Run my first commands Getting Started
Give an AI access to navi MCP Server
Hunt a specific exposure The Hounds
Look up a command CLI Reference
Email a report Emailing Reports
Run a command across hosts Remote Execution
Fix something Troubleshooting

What navi works with

Tenable Vulnerability Management (Tenable.io), Tenable One / Exposure Management, and Tenable WAS. navi is battle-tested at scale — it has ingested tenants with 1.5M+ assets and 160M+ vulnerabilities into navi.db, with plugin queries returning in seconds. FedRAMP tenants are supported via URL configuration.

navi is released under the MIT License.

Clone this wiki locally