WEBVTT

1
00:00:00.650 --> 00:00:07.370
The Room brings engineers, security engineers and BattleTest AI into the same live application assessment.

2
00:00:07.770 --> 00:00:14.618
Before starting, define the permitted targets, choose the testing permissions and provide the access the assessment needs.

3
00:00:15.018 --> 00:00:23.466
This setup overview shows a target, its permission tier and its environment. Scope and public-target authorisation are managed in Settings.

4
00:00:25.766 --> 00:00:34.833
Here, the example application is Wonderland. BattleTest is investigating an invoice API using accounts from two different organisations.

5
00:00:35.233 --> 00:00:42.827
The feed shows the agent's investigation and tool activity. The side panels keep the run structure and participants in view.

6
00:00:43.227 --> 00:00:47.601
The team can follow what is being tested while the assessment is running.

7
00:00:49.901 --> 00:00:55.554
Maya adds context: billing moved onto a shared invoice API in the last release.

8
00:00:55.954 --> 00:01:04.914
Alex can reply in the same conversation. That gives the security engineer application context without moving the discussion to a separate chat.

9
00:01:05.313 --> 00:01:13.485
A message addressed to BattleTest asks the AI a question. Its answer appears in the same feed, alongside the team's messages.

10
00:01:15.785 --> 00:01:24.595
An operator can also steer the investigation. Alex directs BattleTest to focus on the invoice API and check access between accounts.

11
00:01:24.995 --> 00:01:30.478
The directive appears in the feed, followed by BattleTest's response about the next test.

12
00:01:30.878 --> 00:01:37.982
A team message and an operator directive have different purposes: one adds context; the other directs the agent's work.

13
00:01:40.282 --> 00:01:46.618
The finding shows that a request made with the Northstar account returned an invoice belonging to Juniper.

14
00:01:47.018 --> 00:01:56.298
Open the evidence to inspect the request and response. The account used for the request and the owner in the returned data make the access-control issue clear.

15
00:01:56.698 --> 00:02:05.594
Engineers can investigate the evidence with security colleagues and use it to work on a correction. The Room is included in BattleTest Enterprise.