Your SSE stack is a set of promises. Prancer proves which ones hold.
Prancer Security Service Edge is a vendor-neutral offensive validation for Secure Service Edge stacks — ZTNA, CASB, DLP, SWG, DNS security, RBI, GenAI egress and policy assurance — with 23 SSE-specific capabilities and evidence-graded findings.
23 SSE capabilities in one run
- ZTNA app-gate bypass, identity federation attacks, device posture spoofing.
- SWG, CASB, DLP, DNS security, FWaaS, RBI escape testing.
- GenAI egress and prompt-injection exfiltration.
- Sanctioned-SaaS covert C2 (Teams / OneDrive / Slack) and shadow-asset discovery.
- Policy assurance and drift detection with before/after evidence deltas.
Every claim ships with the actual bypass artifact — the file the DLP let through, the domain the DNS control resolved, the ticket the ZTNA gate accepted.
Related SSE and ZTNA reading
- Agentic pentesting explained — why proving a control blocks needs an adversarial agent.
- The SwarmHack engine — the kill chain driving the 23 SSE capabilities.
- Cloud and container capabilities — the workload side of the same egress paths.
- The SSE evidence gap — why policy audits miss controls that never enforce.
- Exploit-validated SSE assessment — captured evidence for every SSE claim.
- SwarmHack documentation — architecture and CLI reference for SSE runs.