Getting Started
Prerequisites
What Talos expects before you run your first scan.
Talos runs anywhere Python 3.10+ runs. The target agent must be reachable over HTTP from the machine running the CLI, and you should scan against a non-production tenant unless you accept the side effects of live tool calls.
Runtime
| Requirement | Minimum | Recommended |
|---|---|---|
| Python | 3.10 | 3.11 or 3.12 |
| Memory | 512 MB | 2 GB (large tool graphs) |
| Disk | 200 MB | 1 GB (traces + reports) |
| Network | Egress to target | Egress to target + PyPI + LLM provider |
Target agent
- Exposes an HTTP endpoint the adapter understands (JSON in, JSON out).
- Uses one of the supported frameworks, or implements the native adapter contract.
- Is deployed against a non-production tenant, dataset, or account for the first scan.
- Has stable credentials Talos can pass via
--header.
Access & credentials
- An LLM API key for the attack generator (OpenAI, Anthropic, or a locally-hosted model).
- Any bearer tokens or API keys the target agent requires.
- Write access to
./reports/or the directory passed to--out.
Best practice
Provision a dedicated service account for Talos with the same permissions as the agent under test. This produces the most realistic findings.