Workflows
Build phased operational workflows with steps you run in authorised sessions.
Workflows turn repeatable operational methodology into structured phases and steps. Use them when you want consistent checklists for labs, assessments, incident response, or team runbooks.
WorkCheats workflows guide your work — they do not execute commands or scripts on your behalf.
Workflow definitions vs sessions
| Concept | What it is |
|---|---|
| Workflow definition | The reusable template in your workspace — title, phases, steps, and operational content |
| Session (workflow run) | One execution of that definition — progress, notes, outputs, and per-run settings |
You edit and archive workflow definitions on the Workflows pages. You run and record work in sessions — see Sessions for session lifecycle, protected sessions, and session variables.
Starting a session creates a new run linked to the workflow definition. Multiple active sessions from the same workflow are supported.
What a workflow definition contains
A workflow definition includes:
- A title and description
- One or more phases (major stages of work)
- Steps within each phase (instructions, command text, notes, or checkpoints)
Phases and steps are reusable structure — operational content you follow or copy into your own tools. They are not executed by WorkCheats.
Create a workflow
- Open Workflows from your workspace sidebar.
- Choose Create workflow.
- Enter a title and description.
- Add phases, then add steps to each phase.
- Save the workflow — it is ready to run in a session.
Screenshot placeholder: Workflow editor showing phases and steps in a structured layout.
Phases and steps
- Phases group related steps (for example, Reconnaissance, Exploitation, Reporting).
- Steps are the atomic units you complete during a session — command text, instructions, or notes.
- Reorder phases and steps as your methodology evolves.
Step completion during a session records session state only — it does not prove a command ran successfully in your environment.
Screenshot placeholder: Phase and step setup panel with add, reorder, and edit controls.
Start from a workflow
- Open a workflow from the Workflows list.
- Choose Start session.
- WorkCheats creates a session linked to that workflow.
Optional when starting:
- Require session passphrase — creates a protected session
- Link a primary report (supports manual Use in report evidence — see Reports lifecycle)
- Configure per-session variables — see Session variables
Sessions track progress while you perform work in your authorised environment.
Duplicate a workflow
Duplicate workflow is available today for the entire workflow definition:
- Open the workflow you want to copy.
- Choose Duplicate workflow.
- WorkCheats creates a new workflow (typically named with a
(copy)suffix). - Edit phases, steps, and metadata on the copy.
Duplicating is useful when you need a variant without changing the original.
Duplicate individual phases or steps in the workflow builder is not available in the current app.
Archive a workflow
When a workflow definition is no longer active:
- Open the workflow.
- Choose Archive workflow.
- Confirm when prompted — the archive dialog summarises linked sessions, active sessions, linked reports, and whether the workflow is in your favorites.
After archive:
- The workflow is hidden from the normal active Workflows list — it is no longer treated as an active definition you can edit or start new sessions from.
- New sessions cannot be started from that archived workflow.
- Existing sessions, linked reports, and evidence are preserved — they are not deleted.
- Sessions tied to the archived workflow become read-only when the original workflow is archived (see Sessions).
- A workflow favorite shows an Archived state on the Favorites page with guidance to open preserved sessions from Sessions instead of opening the archived definition.
Whether you can reopen an archived workflow definition for viewing may vary by list filters and UI state — use Sessions for preserved run history when session access is available.
Import workflows
You can import workflow definitions through Import & Export using Package v1. Import preview may flag duplicate workflow names or source keys — resolve duplicates before confirming import.
Current
- Create, edit, duplicate whole workflows, and archive workflow definitions in the web app
- Phase and step structure with operational content (not executed by WorkCheats)
- Start sessions from workflows with progress tracking
- Optional protected sessions and per-session variables (see Sessions)
- Archive preserves sessions and reports; archived definitions cannot start new sessions
- Read-only
workflow listandworkflow showinwcheatsCLI (summary metadata only — see wcheats CLI)
Roadmap
The following are not available yet:
- Automated step execution or integration with external runners
- Workflow templates marketplace beyond current curated packs
- Duplicate individual phases or steps in the workflow builder (duplicate applies to the whole workflow only)
See Sessions for how active, completed, and archived sessions behave.

