Attack / Run a pentest
Point it at staging. That's the setup.
4 min · Updated Oct 10, 2026 · Works for GitHub and GitLab
Pick a target type, confirm the base URL, add code context and the paths agents must never touch. You'll see the request estimate before launch.
08 · RUN A PENTEST · TRY IT
~4.2K req~3h · 2 × 5h windows
Targets#
Web apps, APIs, Android apps, MCP servers and AI / LLM features. Ownership is verified through your deployment provider.
Safety rails#
Never-touch paths are honored, runs are paced across your 5h and weekly windows, and safe mode pauses automatically on 5xx spikes.
Was this helpful?