Bolt overview

Bolt is an evidence-first investigation workspace for defenders, authorized testers, detection engineers, incident responders, and security leaders. You bring the case and the evidence; Bolt helps you triage, reason, and record a decision a reviewer can check.

What Bolt is for

• Alert triage with stated confidence and next checks.
• Incident timelines, containment options, and evidence preservation lists.
• Detection-rule review: logic, blind spots, tuning, and test cases.
• Authorized assessment planning inside a documented scope.
• Vulnerability prioritization combining exposure, criticality, and feasibility.

What Bolt is not

• Authorization to test a system.
• Proof that an environment is clean.
• A replacement for a qualified incident commander.
• Independently verified output. Review every consequential conclusion.