Find security flaws in your web application.
Tests web applications for security weaknesses and produces a report with reproduction steps and remediation guidance.
When to use it
Use for pre-deployment security assessments, compliance testing, remediation retesting, and assessments where automated scanning is insufficient.
Give it authorized application URLs, testing boundaries, and application documentation; it returns a security assessment report with remediation guidance.
What you provide
Requires a Professional license and up-to-date Active Scan++, Autorize, JSON Beautifier, and Logger++ extensions.
Requires valid test accounts at standard-user and administrator privilege levels, alongside unauthenticated testing.
This skill
target application
Sends potentially destructive test requests (irreversible)
other users' application resources
Probes access to other users' data