Navigator
Navigator is an AI-powered assistant that delivers personalized, context-specific security guidance directly within SD Elements. It helps teams quickly access security knowledge, retrieve relevant project insights, and get actionable answers to common security questions — all in natural language.
| Navigator is available to organizations with a signed contract amendment enabling the feature. If it’s not visible in your instance, please reach out to your Account Team. |
| Navigator follows existing SD Elements permission settings. Users will only be able to retrieve information from data they already have access to. |
Using Navigator
To use Navigator, follow the steps below:
-
Click the Navigator icon located in the bottom-right corner of the application.
-
Type a question or prompt in the input field.
-
Press Enter or click Send.
-
The response will appear in the chat window.
Navigator will generate a response based on your access and the context of the question. Where possible, answers will include links to relevant SD Elements pages.
Navigator works by using the SD Elements knowledge base in combination with a large language model (LLM), to deliver relevant responses. It fetches snippets from SD Elements content that match your query, validates the LLM output, and returns it to you in a clear, conversational format.
Example: "Can you provide further context on countermeasure T21?"
What Navigator Can Help You Do
Navigator can be used to:
Navigator is powered by the extensive SD Elements library of security content, ensuring that its responses are grounded in trusted, up-to-date knowledge. The following features are included:
Context Awareness – Navigator understands your current task, project, and role to deliver guidance that’s relevant, not generic.
Semantic Search Capabilities – Go beyond keywords by using natural language to find threats, countermeasures, best practices, and more, with precision.
Organization-Specific Content Interaction – Access countermeasures, weaknesses, and security guidance specific to your organization’s standards, configurations, and content.
Context-Specific Guidance – Get actionable, security-focused code examples based on your tech stack and implementation context.
Multi-Language Support – Interact with Navigator in multiple spoken languages, making it easier for global teams to access and understand guidance.
Knowledgebase Lookup – Ask questions based on SD Elements security content.
Web Page Fetcher – Fetch content from specific documentation pages.
Project Lookup – Retrieve project-specific insights such as survey answers, countermeasures, and threats.
Best Practices
Best practices when prompting Navigator:
Be Clear and Specific – State your question clearly to receive accurate answers.
Provide Context – Add relevant background details to help the model understand your intent.
Ask One Question at a Time – Avoid compound questions to improve precision.
Use Function Names in Prompts – Include phrases like "based on knowledgebase" or "based on Project" to guide the LLM to first search Security Compass content.
Specify Desired Format – Mention how you’d like to receive the answer (e.g., "bullet list with ID and priority").
Limit the Scope – Focus on one topic at a time for a more detailed response.
Review and Refine – If needed, refine your question to improve the result.