🔍 Launch New Scan

{% if error %}
{{ error }}
{% endif %}
Must start with ws:// or wss://
Cancel

💡 Tips

  • Rate limiting: Start with 5-10 req/s to avoid triggering WAFs
  • OAST: Enables blind vulnerability detection via out-of-band callbacks
  • Playwright: Verifies XSS in a real browser — requires playwright install chromium
  • Authentication: For authenticated endpoints, use the CLI with --headers