CATE · Systems & Behavior

Calypso Automated Test Engine for real application flows.

CATE is a CLI-first adversarial analysis framework that applies controlled pressure to HTTP workflows and APIs. Use it to probe failure modes, stress authentication surfaces, simulate brute-force patterns, and generate artifacts that teams can review or gate in CI.

CLI-first Auth pressure Brute-force simulation HTTP flows Signals + reports

Engage!

How it works

Define flows and inputs, run controlled adversarial modes, then review structured artifacts. CATE is built to be deterministic, scriptable, and usable in both local investigation and CI pipelines.

Define → execute → observe

# 1) Define a workflow (flows.toml)
# 2) Run a mode against a target
# 3) Inspect results + signals + reports

cate http-flow --flows-file flows.toml --flow login --mode auth-pressure --output logs/login

Outputs

JSONL run logs (per request/step)
Response grouping + error rate summaries
Signals (severity, counts, latency, notes)
HTML + Markdown reports (optional)

Adversarial modes

CATE focuses on controlled misuse patterns and stress behaviors. Use it only on systems you own or are authorized to test.

Auth pressure (workflow-based)

cate http-flow \
  --flows-file flows.toml \
  --flow delphonix-login \
  --mode auth-pressure \
  --exit-snapshot \
  --output logs/delphonix/login

Fuzz / payload pressure (endpoint-based)

cate http-fuzz \
  --url "http://localhost:8080/login?b={payload}" \
  --wordlist /tmp/payloads_demo.txt \
  --concurrency 10 \
  --max-rps 5 \
  --output logs/demo/signaltest

Brute-force simulation (safe patterning)

# Example concept (adapt to your config model):
# - fixed window
# - controlled RPS
# - stop-on-error-rate for safety

cate http-flow --flows-file flows.toml --flow login \
  --mode auth-pressure --max-rps 2 --stop-on-error-rate 0.25

Keep runs controlled. Rate-limit, cap concurrency, and stop automatically on unhealthy error rates.

Signals & reporting

# Signals + summaries (paths vary by command)
ls -la logs/demo/signaltest.*

# Example outputs:
# - logs/demo/signaltest.jsonl
# - logs/demo/signaltest.signals.json
# - logs/demo/signaltest.signals.md

Get started

CATE is distributed as a developer tool. The fastest path is to follow the repository docs and run locally. When you’re ready, wire runs into CI and treat signals as regression gates.

Install

# Example (replace with your real instructions)
# pipx install cate
# or: pip install cate

cate --help

Verify

# From repo root (your standard verify script)
bash ./scripts/verify.sh

# Run a flow
cate http-flow --flows-file flows.toml --flow login --output logs/verify/login

Visit Github page