Skip to content

Quick Start

Get Salient running and complete your first tabletop exercise in 5 minutes.

Prerequisites

  • Docker and Docker Compose
  • Python 3.11+ (for MCP server)
  • A Claude API key (optional — platform works without it, AI features need it)

1. Clone and Start

git clone https://github.com/noperse/projectTTX_Salient.git
cd projectTTX_Salient
cp .env.example .env

Edit .env with your settings:

# Required
SECRET_KEY=$(python3 -c "import secrets; print(secrets.token_hex(32))")

# Optional — enables AI scoring, playbook generation, and fact mining
AI_PROVIDER=anthropic
ANTHROPIC_API_KEY=sk-ant-...

Start the platform:

make dev

This starts the backend (:8000) and frontend (:3000).

2. Connect MCP

In your project directory, the .mcp.json is already configured. If using Claude Code:

# The MCP server auto-connects from .mcp.json
# Verify with:
claude mcp list

You should see ttx-salient in the list.

3. Run Your First Exercise

/ttx

Claude will:

  1. Load the evaluator framework
  2. Pull your org profile (empty on first run — that's fine)
  3. Show available scenarios
  4. Facilitate the exercise inject-by-inject
  5. Score your responses against NIST CSF
  6. Mine organizational facts from your answers
  7. Generate an incident response playbook

4. Build Your Twin

After your first exercise, the twin starts learning. Accelerate it:

/ttx gather

This walks you through collecting evidence: security tools, team contacts, IR plans, backup procedures. Every piece enriches the twin.

5. Connect Identity Data

If you have Okta or Entra ID:

/ttx
> Let's connect Okta to get real identity posture data

The connector setup wizard walks you through it in the browser, or Claude can trigger syncs via MCP tools.

What's Next

  • Run more exercises — each one makes the twin smarter and the scoring more targeted
  • Upload artifacts — IR plans, security policies, architecture docs (drag-and-drop in the UI)
  • Connect sibling MCPs — /ttx enrich pulls security data from Gmail, Notion, Calendar
  • Review posture — posture_assessment gives you a board-ready security report

Architecture Overview · Digital Twin · MCP Integration