Skip to main content
Components are the building blocks of ShipSec Studio workflows. Each component performs a specific task and can be connected together to create powerful automation pipelines.

Component Categories

Core

Triggers, file handling, data transformation, and outputs

Security

Subdomain discovery, port scanning, DNS resolution, secret detection

AI

Provider configurations and autonomous agents

How Components Work

Each component has:
  • Inputs – Data ports that accept connections from other components
  • Outputs – Data ports that can be connected to downstream components
  • Parameters – Configurable settings in the sidebar
Components run inside Docker containers for isolation and reliability. Workflows are orchestrated by Temporal with automatic retries and resumability.

Component Structure

Example Pipelines

Attack Surface Discovery

  1. Manual Trigger – User provides target domains
  2. Subfinder – Discovers subdomains
  3. DNSx – Resolves DNS records
  4. httpx – Probes for live HTTP services
  5. Notify – Sends results to Slack, Discord, or Teams

Secret Detection

  1. Manual Trigger – User provides repository URL
  2. TruffleHog – Scans for leaked credentials
  3. OpenAI Provider – Set up model and API key
  4. AI Generate Text – Analyzes and prioritizes findings
  5. Notify – Alerts team via Slack, Discord, or email

Execution Context

Components receive an ExecutionContext with access to:

Building Custom Components

See the Component Development Guide for detailed instructions on building your own components.