Live web pentest

New Web App Pentest

Configure an authorized target, source context, test identities, and the evidence lanes SecHelix should run.

Targets

Add the web application SecHelix is authorized to test.

Target URLHosted ownership proof methodConsole access tokenThe token establishes an HttpOnly console session and is never added to the pentest config.

Scope is enforced outside the model.

The browser cannot follow a redirect or request to a host that was not explicitly admitted.