--- title: "Update profile configuration" method: PUT path: "/profiles/{profileId}/configuration" tags: ["Profiles"] --- # Update profile configuration `PUT /profiles/{profileId}/configuration` ## Request - Base URL: `https://public.escape.tech/v3` - URL: `https://public.escape.tech/v3/profiles/{profileId}/configuration` - Auth: API key in header `X-ESCAPE-API-KEY` Update the configuration of a profile ## Path parameters - `profileId` string, required: The profile ID ## Request body - object - `configuration` object, required: The configuration to update - `scope` object, nullable - `use_defaults` boolean, nullable - `allowlist` union[], nullable - union - object - `type` 'domain', required - `value` string, required - `operation` 'equals' | 'starts_with' | 'ends_with' | 'contains' | 'regex' | 'wildcard' | 'null', nullable - object - `type` 'ip', required - `value` string, required - `operation` 'equals' | 'starts_with' | 'ends_with' | 'contains' | 'regex' | 'wildcard' | 'null', nullable - object - `type` 'web_page_url', required - `value` string, required - `operation` 'equals' | 'starts_with' | 'ends_with' | 'contains' | 'regex' | 'wildcard' | 'null', nullable - object - `type` 'rest_api_path', required - `value` string, required - `operation` 'equals' | 'starts_with' | 'ends_with' | 'contains' | 'regex' | 'wildcard' | 'null', nullable - `method` 'CONNECT' | 'DELETE' | 'GET' | 'HEAD' | 'OPTIONS' | 'PATCH' | 'POST' | 'PUT' | 'TRACE' | 'null', nullable - `domain` string, nullable - object - `type` 'rest_api_url', required - `value` string, required - `operation` 'equals' | 'starts_with' | 'ends_with' | 'contains' | 'regex' | 'wildcard' | 'null', nullable - `method` 'CONNECT' | 'DELETE' | 'GET' | 'HEAD' | 'OPTIONS' | 'PATCH' | 'POST' | 'PUT' | 'TRACE' | 'null', nullable - object - `type` 'graphql_operation', required - `value` string, required - `operation` 'equals' | 'starts_with' | 'ends_with' | 'contains' | 'regex' | 'wildcard' | 'null', nullable - object - `type` 'web_page_element_selector', required - `value` string, required - `operation` 'equals' | 'starts_with' | 'ends_with' | 'contains' | 'regex' | 'wildcard' | 'null', nullable - `blocklist` union[], nullable - union - object - `type` 'domain', required - `value` string, required - `operation` 'equals' | 'starts_with' | 'ends_with' | 'contains' | 'regex' | 'wildcard' | 'null', nullable - object - `type` 'ip', required - `value` string, required - `operation` 'equals' | 'starts_with' | 'ends_with' | 'contains' | 'regex' | 'wildcard' | 'null', nullable - object - `type` 'web_page_url', required - `value` string, required - `operation` 'equals' | 'starts_with' | 'ends_with' | 'contains' | 'regex' | 'wildcard' | 'null', nullable - object - `type` 'rest_api_path', required - `value` string, required - `operation` 'equals' | 'starts_with' | 'ends_with' | 'contains' | 'regex' | 'wildcard' | 'null', nullable - `method` 'CONNECT' | 'DELETE' | 'GET' | 'HEAD' | 'OPTIONS' | 'PATCH' | 'POST' | 'PUT' | 'TRACE' | 'null', nullable - `domain` string, nullable - object - `type` 'rest_api_url', required - `value` string, required - `operation` 'equals' | 'starts_with' | 'ends_with' | 'contains' | 'regex' | 'wildcard' | 'null', nullable - `method` 'CONNECT' | 'DELETE' | 'GET' | 'HEAD' | 'OPTIONS' | 'PATCH' | 'POST' | 'PUT' | 'TRACE' | 'null', nullable - object - `type` 'graphql_operation', required - `value` string, required - `operation` 'equals' | 'starts_with' | 'ends_with' | 'contains' | 'regex' | 'wildcard' | 'null', nullable - object - `type` 'web_page_element_selector', required - `value` string, required - `operation` 'equals' | 'starts_with' | 'ends_with' | 'contains' | 'regex' | 'wildcard' | 'null', nullable - `mode` 'read_only' | 'read_write' | 'null', nullable - `profile` 'surface' | 'cicd' | 'default' | 'deep' | 'unrestricted' | 'null', nullable - `authentication` object, nullable - `$schema` string - `lifetime` number, nullable - `procedures` object[] - `name` string, required - `operations` union[], required - union - object - … - object - … - object - … - object - … - object - … - object - … - `injections` union, required - object[] - `location` 'header' | 'cookie' | 'body' | 'query', required - `key` string, required - `prefix` string - `variable` string, required - object[] - `location` 'page' | 'browser_local_storage' | 'browser_session_storage' | 'browser_cookies', required - `origin` string, required - `key` string, required - `variable` string, required - `users` object[] - `name` string, required - `role` string, nullable - `credentials` object - `username` string - `password` string - `headers` object[], nullable - `name` string, required - `values` string[], required - `cookies` object[], nullable - `name` string, required - `domain` string, nullable - `path` string, nullable - `http_only` boolean, nullable - `secure` boolean, nullable - `same_site` 'Strict' | 'Lax' | 'None' | 'null', nullable - `values` string[], required - `query_parameters` object[], nullable - `name` string, required - `values` string[], required - `body` unknown - `local_storage` object, nullable - `session_storage` object, nullable - `actions` union[], nullable - union - … - `pre_login_actions` union[], nullable - union - … - `post_login_actions` union[], nullable - union - … - `on_trigger_actions` object[], nullable - `type` 'locator', required - `locator` string, required - `actions` union[], required - … - `digest` string, nullable - `basic` string, nullable - `procedure` string - `variables` object[], nullable - `name` string, required - `value` string, required - `main_user` boolean, nullable - `allow_failure` boolean, nullable - `user_instructions` string, nullable - `validation` boolean - `proxy` string - `presets` union[] - union - object - `type` 'http', required - `users` object[], required - … - `request` object, required - … - `extractions` object[] - … - `injections` object[] - … - object - `type` 'oauth_ropc', required - `users` object[], required - … - `url` string, required - `client_id` string, required - `client_secret` string, required - object - `type` 'oauth_client_credentials', required - `users` object[], required - … - `url` string, required - object - `type` 'oauth_authz_code_browser', required - `users` object[], required - … - `authorization_url` string, required - `token_url` string, required - `client_id` string, required - `client_secret` string, required - `redirect_uri` string, required - `scopes` string[] - `use_pkce` boolean, required - `login_timeout` number, nullable - `logout_detection` object, nullable - … - object - `type` 'basic', required - `users` object[], required - … - object - `type` 'graphql', required - `users` object[], required - … - `url` string, required - `query` string, required - `extractions` object[], nullable - … - `injections` object[], nullable - … - object - `type` 'digest', required - `users` object[], required - … - object - `type` 'cognito_userpass', required - `users` object[], required - … - `region` 'us-east-2' | 'us-east-1' | 'us-west-1' | 'us-west-2' | 'af-south-1' | 'ap-east-1' | 'ap-south-1' | 'ap-northeast-3' | 'ap-northeast-2' | 'ap-southeast-1' | 'ap-southeast-2' | 'ap-northeast-1' | 'ca-central-1' | 'cn-north-1' | 'cn-northwest-1' | 'eu-central-1' | 'eu-west-1' | 'eu-west-2' | 'eu-south-1' | 'eu-west-3' | 'eu-north-1' | 'me-south-1' | 'sa-east-1', required - `client_id` string, required - `client_secret` string, nullable - object - `type` 'headers', required - `users` object[], required - … - object - `type` 'curl', required - `users` object[], required - … - `extractions` object[], required - … - `injections` object[], required - … - `timeout` number, nullable - object - `type` 'curl_sequence', required - `users` object[], required - … - `requests` object[], required - … - `injections` object[] - … - object - `type` 'browser_agent', required - `users` object[], required - … - `login_url` string, required - `stealth_mode` boolean, nullable - `logout_detection` object, nullable - … - `extractions` object[], nullable - … - `injections` union - … - `logged_in_detector_text` string, nullable - `logged_in_detector_timeout` number, nullable - `agentic` object, nullable - … - object - `type` 'browser_actions', required - `users` object[], required - … - `login_url` string, required - `stealth_mode` boolean, nullable - `logout_detection` object, nullable - … - `extractions` object[], nullable - … - `injections` union - … - `logged_in_detector_text` string, nullable - `logged_in_detector_timeout` number, nullable - object - `type` 'custom_bpce', required - `users` object[], required - … - `environment` 'BP' | 'CE', required - `environment_overrides` object, nullable - … - `extractions` object[] - … - `injections` object[] - … - object - `type` 'custom_msc', required - `users` object[], required - … - `tenant_id` string, required - `client_id` string, required - `resource_app_id` string, required - `certificate_pfx_base64` string, required - `certificate_password` string, nullable - `scope` string, nullable - `token_url` string, nullable - `extractions` object[], nullable - … - `injections` object[], nullable - … - `multi_user_is_fallback` boolean, nullable - `is_parallel_auth_validation` boolean, nullable - `security_tests` object, nullable - `high_number_of_custom_scalars` object, nullable - `skip` boolean, nullable - `detection_threshold` number, nullable - `high_number_of_pci` object, nullable - `skip` boolean, nullable - `detection_threshold` number, nullable - `high_number_of_pii` object, nullable - `skip` boolean, nullable - `detection_threshold` number, nullable - `high_number_of_phi` object, nullable - `skip` boolean, nullable - `detection_threshold` number, nullable - `high_number_of_secrets` object, nullable - `skip` boolean, nullable - `detection_threshold` number, nullable - `adminer_default_login` object, nullable - `skip` boolean, nullable - `xss_agent` object, nullable - `skip` boolean, nullable - `sql_injection_agent` object, nullable - `skip` boolean, nullable - `replay_agent` object, nullable - `skip` boolean, nullable - `ssrf_agent` object, nullable - `skip` boolean, nullable - `command_injection_agent` object, nullable - `skip` boolean, nullable - `access_control_agent` object, nullable - `skip` boolean, nullable - `business_logic_agent` object, nullable - `skip` boolean, nullable - `cassandra_allow_all_authenticator` object, nullable - `skip` boolean, nullable - `airflow_config_exposure` object, nullable - `skip` boolean, nullable - `airflow_default_login` object, nullable - `skip` boolean, nullable - `airflow_v3_default_login` object, nullable - `skip` boolean, nullable - `alibaba_canal_leak` object, nullable - `skip` boolean, nullable - `angular_development_build` object, nullable - `skip` boolean, nullable - `ansible_config_exposure` object, nullable - `skip` boolean, nullable - `apache_apollo_default_login` object, nullable - `skip` boolean, nullable - `apache_druid_log4j` object, nullable - `skip` boolean, nullable - `apache_flink_unauth_rce` object, nullable - `skip` boolean, nullable - `apache_hertzbeat_default_login` object, nullable - `skip` boolean, nullable - `apache_nifi_rce` object, nullable - `skip` boolean, nullable - `apache_ofbiz_log4j_rce` object, nullable - `skip` boolean, nullable - `apache_solr_file_read` object, nullable - `skip` boolean, nullable - `apache_solr_log4j_rce` object, nullable - `skip` boolean, nullable - `apache_solr_rce` object, nullable - `skip` boolean, nullable - `apisix_default_login` object, nullable - `skip` boolean, nullable - `application_enumeration` object, nullable - `skip` boolean, nullable - `appspec_exposure` object, nullable - `skip` boolean, nullable - `appveyor_config_exposure` object, nullable - `skip` boolean, nullable - `asp_net_view_state_encryption` object, nullable - `skip` boolean, nullable - `asp_net_view_state_mac_validation_disabled` object, nullable - `skip` boolean, nullable - `authentication_bypass` object, nullable - `skip` boolean, nullable - `arcade_php_sqli` object, nullable - `skip` boolean, nullable - `aws_access_token` object, nullable - `skip` boolean, nullable - `aws_config_exposure` object, nullable - `skip` boolean, nullable - `aws_docker_config_exposure` object, nullable - `skip` boolean, nullable - `awstats_config_exposure` object, nullable - `skip` boolean, nullable - `awstats_exposure` object, nullable - `skip` boolean, nullable - `bsphp_info` object, nullable - `skip` boolean, nullable - `bola` object, nullable - `skip` boolean, nullable - `do_not_fuzz` string[], nullable - `bola_enum` object, nullable - `skip` boolean, nullable - `do_not_fuzz` string[], nullable - `bola_idor` object, nullable - `skip` boolean, nullable - `do_not_fuzz` string[], nullable - `broken_function_level_authorization` object, nullable - `skip` boolean, nullable - `character_limit` object, nullable - `skip` boolean, nullable - `client_side_state_tampering` object, nullable - `skip` boolean, nullable - `clickhouse_no_auth` object, nullable - `skip` boolean, nullable - `cgi_bin_rce` object, nullable - `skip` boolean, nullable - `frontend_bola` object, nullable - `skip` boolean, nullable - `do_not_fuzz` string[], nullable - `cloudstack_default_login` object, nullable - `skip` boolean, nullable - `codimd_unauth_file_upload` object, nullable - `skip` boolean, nullable - `command` object, nullable - `skip` boolean, nullable - `config_json_exposure_fuzz` object, nullable - `skip` boolean, nullable - `frontend_command_injection` object, nullable - `skip` boolean, nullable - `console_error` object, nullable - `skip` boolean, nullable - `cors` object, nullable - `skip` boolean, nullable - `cors_acao_missing` object, nullable - `skip` boolean, nullable - `cors_acao_misconfig` object, nullable - `skip` boolean, nullable - `cors_vary_header` object, nullable - `skip` boolean, nullable - `csp_allowed_scripts` object, nullable - `skip` boolean, nullable - `csp_missing` object, nullable - `skip` boolean, nullable - `csp_unsafe_eval` object, nullable - `skip` boolean, nullable - `crashing_page` object, nullable - `skip` boolean, nullable - `dbgate_unauth_rce` object, nullable - `skip` boolean, nullable - `frontend_crlf` object, nullable - `skip` boolean, nullable - `csrf_get_based` object, nullable - `skip` boolean, nullable - `cve_2021_44228` object, nullable - `skip` boolean, nullable - `cve_2024_25723` object, nullable - `skip` boolean, nullable - `cve_2024_32651` object, nullable - `skip` boolean, nullable - `cve_2024_40711` object, nullable - `skip` boolean, nullable - `cve_2026_109619` object, nullable - `skip` boolean, nullable - `cve_2026_63030` object, nullable - `skip` boolean, nullable - `cve_2026_64638` object, nullable - `skip` boolean, nullable - `csrf_post_based` object, nullable - `skip` boolean, nullable - `csrf_token_invalidation` object, nullable - `skip` boolean, nullable - `frontend_csrf_get_based` object, nullable - `skip` boolean, nullable - `frontend_csrf_post_based` object, nullable - `skip` boolean, nullable - `debug_mode` object, nullable - `skip` boolean, nullable - `django_secret_key` object, nullable - `skip` boolean, nullable - `dns_open_recursive_resolver` object, nullable - `skip` boolean, nullable - `dolphinscheduler_default_login` object, nullable - `skip` boolean, nullable - `doris_default_login` object, nullable - `skip` boolean, nullable - `directory_traversal` object, nullable - `skip` boolean, nullable - `dkim` object, nullable - `skip` boolean, nullable - `dmarc` object, nullable - `skip` boolean, nullable - `loopback` object, nullable - `skip` boolean, nullable - `permisive_spf` object, nullable - `skip` boolean, nullable - `dnsrecord_private_ip` object, nullable - `skip` boolean, nullable - `dnsrecord_txt_length` object, nullable - `skip` boolean, nullable - `dnsrecord_txt_sensitive` object, nullable - `skip` boolean, nullable - `dnssec_disabled` object, nullable - `skip` boolean, nullable - `stored_xss` object, nullable - `skip` boolean, nullable - `reflected_xss` object, nullable - `skip` boolean, nullable - `domain_takeover` object, nullable - `skip` boolean, nullable - `dangling_cname` object, nullable - `skip` boolean, nullable - `drupal7_elfinder_rce` object, nullable - `skip` boolean, nullable - `drupal_avatar_xss` object, nullable - `skip` boolean, nullable - `dubbo_admin_default_login` object, nullable - `skip` boolean, nullable - `easyimage_downphp_lfi` object, nullable - `skip` boolean, nullable - `ecology_mysql_config` object, nullable - `skip` boolean, nullable - `elasticsearch_default_login` object, nullable - `skip` boolean, nullable - `esafenet_mysql_fileread` object, nullable - `skip` boolean, nullable - `exploitable_cve` object, nullable - `skip` boolean, nullable - `excessive_browser_permissions` object, nullable - `skip` boolean, nullable - `exposed_config_file` object, nullable - `skip` boolean, nullable - `frontend_domain_takeover` object, nullable - `skip` boolean, nullable - `frontend_header_set_cookie` object, nullable - `skip` boolean, nullable - `frontend_insecure_websocket` object, nullable - `skip` boolean, nullable - `frontend_potential_cve` object, nullable - `skip` boolean, nullable - `frontend_server_error` object, nullable - `skip` boolean, nullable - `frontend_software_component_leak` object, nullable - `skip` boolean, nullable - `frontend_sql_injection` object, nullable - `skip` boolean, nullable - `dedupe_query_params_by_name` boolean, nullable - `frontend_ssl` object, nullable - `skip` boolean, nullable - `frontend_timeout` object, nullable - `skip` boolean, nullable - `frontend_xss_via_domain_takeover` object, nullable - `skip` boolean, nullable - `exposed_mysql_config` object, nullable - `skip` boolean, nullable - `exposed_settings_php` object, nullable - `skip` boolean, nullable - `exposed_sourcemap` object, nullable - `skip` boolean, nullable - `issues_count_limit` number, nullable - `exposed_sql_dumps` object, nullable - `skip` boolean, nullable - `file_disclosure` object, nullable - `skip` boolean, nullable - `file_upload_detected` object, nullable - `skip` boolean, nullable - `file_upload_unrestricted` object, nullable - `skip` boolean, nullable - `file_upload_stored_xss` object, nullable - `skip` boolean, nullable - `file_upload_rce` object, nullable - `skip` boolean, nullable - `file_upload_path_traversal` object, nullable - `skip` boolean, nullable - `file_upload_xxe` object, nullable - `skip` boolean, nullable - `file_upload_ssrf` object, nullable - `skip` boolean, nullable - `file_upload_zip_slip` object, nullable - `skip` boolean, nullable - `graphql_alias_limit` object, nullable - `skip` boolean, nullable - `graphql_authz_bypass` object, nullable - `skip` boolean, nullable - `graphql_batch_limit` object, nullable - `skip` boolean, nullable - `graphql_circular_introspection` object, nullable - `skip` boolean, nullable - `graphql_directive_overload` object, nullable - `skip` boolean, nullable - `graphql_field_duplication` object, nullable - `skip` boolean, nullable - `graphql_field_suggestion` object, nullable - `skip` boolean, nullable - `graphql_recursive_fragment` object, nullable - `skip` boolean, nullable - `guessable_cookie_value` object, nullable - `skip` boolean, nullable - `header_cache_control` object, nullable - `skip` boolean, nullable - `header_content_security_policy` object, nullable - `skip` boolean, nullable - `header_content_type` object, nullable - `skip` boolean, nullable - `header_set_cookie` object, nullable - `skip` boolean, nullable - `header_strict_transport_security` object, nullable - `skip` boolean, nullable - `header_x_content_type_options` object, nullable - `skip` boolean, nullable - `header_x_frame_options` object, nullable - `skip` boolean, nullable - `host_header_injection_redirect` object, nullable - `skip` boolean, nullable - `host_header_injection_reflected` object, nullable - `skip` boolean, nullable - `html_injection` object, nullable - `skip` boolean, nullable - `http2_not_supported` object, nullable - `skip` boolean, nullable - `http_method_override` object, nullable - `skip` boolean, nullable - `http_no_https_redirect` object, nullable - `skip` boolean, nullable - `http_param_pollution` object, nullable - `skip` boolean, nullable - `ide_enabled` object, nullable - `skip` boolean, nullable - `improper_input_client_side_proto_pollution` object, nullable - `skip` boolean, nullable - `improper_input_csp_bypass` object, nullable - `skip` boolean, nullable - `improper_input_frontend_template_injection` object, nullable - `skip` boolean, nullable - `improper_input_xss` object, nullable - `skip` boolean, nullable - `improper_input_xss_query_params` object, nullable - `skip` boolean, nullable - `improper_input_xss_reflection` object, nullable - `skip` boolean, nullable - `improper_session_invalidation` object, nullable - `skip` boolean, nullable - `introspection_enabled` object, nullable - `skip` boolean, nullable - `jwt_alg_confusion_rs_to_hs` object, nullable - `skip` boolean, nullable - `jwt_alg_none` object, nullable - `skip` boolean, nullable - `exposed_jwt` object, nullable - `skip` boolean, nullable - `jwt_sign_check` object, nullable - `skip` boolean, nullable - `jwt_weak_secret` object, nullable - `skip` boolean, nullable - `leaking_authentication` object, nullable - `skip` boolean, nullable - `llm_prompt_injection` object, nullable - `skip` boolean, nullable - `llm_system_prompt_leak` object, nullable - `skip` boolean, nullable - `llm_insecure_output_handling` object, nullable - `skip` boolean, nullable - `llm_command_injection` object, nullable - `skip` boolean, nullable - `llm_ssrf` object, nullable - `skip` boolean, nullable - `llm_tool_exposure` object, nullable - `skip` boolean, nullable - `mass_assignment` object, nullable - `skip` boolean, nullable - `mcp_unauth` object, nullable - `skip` boolean, nullable - `mfa_bypass` object, nullable - `skip` boolean, nullable - `missing_authentication` object, nullable - `skip` boolean, nullable - `missing_pkce` object, nullable - `skip` boolean, nullable - `missing_rate_limiting` object, nullable - `skip` boolean, nullable - `modbus_unauthenticated_write` object, nullable - `skip` boolean, nullable - `mongo_no_auth` object, nullable - `skip` boolean, nullable - `negative_value` object, nullable - `skip` boolean, nullable - `neo4j_auth_disabled` object, nullable - `skip` boolean, nullable - `nosql` object, nullable - `skip` boolean, nullable - `frontend_nosql_injection` object, nullable - `skip` boolean, nullable - `oauth_grant_misconfiguration` object, nullable - `skip` boolean, nullable - `oauth_missing_state_validation` object, nullable - `skip` boolean, nullable - `pagination_missing` object, nullable - `skip` boolean, nullable - `frontend_open_redirect` object, nullable - `skip` boolean, nullable - `frontend_page_fingerprint_internal` object, nullable - `skip` boolean, nullable - `frontend_page_fingerprint_unconfigured_webapp` object, nullable - `skip` boolean, nullable - `password_field_autocompletion` object, nullable - `skip` boolean, nullable - `positive_integer_validation` object, nullable - `skip` boolean, nullable - `private_data` object, nullable - `skip` boolean, nullable - `users` object, nullable - `private_ip` object, nullable - `skip` boolean, nullable - `reflected_url_parameter` object, nullable - `skip` boolean, nullable - `request_url_override` object, nullable - `skip` boolean, nullable - `response_size` object, nullable - `skip` boolean, nullable - `max_length` number, nullable - `sensitive_comments` object, nullable - `skip` boolean, nullable - `server_error` object, nullable - `skip` boolean, nullable - `session_fixation` object, nullable - `skip` boolean, nullable - `software_component_leak` object, nullable - `skip` boolean, nullable - `snmp_default_read_community` object, nullable - `skip` boolean, nullable - `snmp_default_write_community` object, nullable - `skip` boolean, nullable - `springboot_actuator_dump` object, nullable - `skip` boolean, nullable - `springboot_actuator_env` object, nullable - `skip` boolean, nullable - `springboot_actuator_heapdump` object, nullable - `skip` boolean, nullable - `springboot_actuator_logfile` object, nullable - `skip` boolean, nullable - `springboot_actuator_mappings` object, nullable - `skip` boolean, nullable - `springboot_actuator_restart` object, nullable - `skip` boolean, nullable - `springboot_actuator_shutdown` object, nullable - `skip` boolean, nullable - `springboot_actuator_trace` object, nullable - `skip` boolean, nullable - `sql` object, nullable - `skip` boolean, nullable - `dedupe_query_params_by_name` boolean, nullable - `sql_injection_oracle_based` object, nullable - `skip` boolean, nullable - `sql_injection_boolean_based` object, nullable - `skip` boolean, nullable - `ssl_certificate` object, nullable - `skip` boolean, nullable - `ssl` object, nullable - `skip` boolean, nullable - `issue_ssl_anonymous_null_ciphers` object, nullable - `skip` boolean, nullable - `issue_ssl_beast_tls10_cbc_ciphers` object, nullable - `skip` boolean, nullable - `issue_ssl_broken_chain_of_trust` object, nullable - `skip` boolean, nullable - `issue_ssl_ccs_injection_vulnerability` object, nullable - `skip` boolean, nullable - `issue_ssl_certificate_revocation_status_issue` object, nullable - `skip` boolean, nullable - `issue_ssl_crime_tls_compression` object, nullable - `skip` boolean, nullable - `issue_ssl_drown_vulnerability` object, nullable - `skip` boolean, nullable - `issue_ssl_excessive_server_certificates` object, nullable - `skip` boolean, nullable - `issue_ssl_improper_certificate_chain_order` object, nullable - `skip` boolean, nullable - `issue_ssl_improper_certificate_eku` object, nullable - `skip` boolean, nullable - `issue_ssl_improper_certificate_key_usage` object, nullable - `skip` boolean, nullable - `issue_ssl_improper_cipher_suite_order` object, nullable - `skip` boolean, nullable - `issue_ssl_improper_tls10_cipher_order` object, nullable - `skip` boolean, nullable - `issue_ssl_improper_tls11_cipher_order` object, nullable - `skip` boolean, nullable - `issue_ssl_improper_tls12_cipher_order` object, nullable - `skip` boolean, nullable - `issue_ssl_improper_tls13_cipher_order` object, nullable - `skip` boolean, nullable - `issue_ssl_improper_tls_handshake_timestamp` object, nullable - `skip` boolean, nullable - `issue_ssl_insecure_protocol_negotiation` object, nullable - `skip` boolean, nullable - `issue_ssl_insufficient_certificate_key_size` object, nullable - `skip` boolean, nullable - `issue_ssl_invalid_certificate_validity_period` object, nullable - `skip` boolean, nullable - `issue_ssl_logjam_common_primes` object, nullable - `skip` boolean, nullable - `issue_ssl_misconfigured_san` object, nullable - `skip` boolean, nullable - `issue_ssl_misconfigured_tls12` object, nullable - `skip` boolean, nullable - `issue_ssl_mismatched_certificate_common_name` object, nullable - `skip` boolean, nullable - `issue_ssl_mismatched_common_name_without_sni` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_alpn` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_certificate_transparency` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_crl_distribution_points` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_etls` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_ev_certificate_policies` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_must_staple` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_npn` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_ocsp_stapling` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_ocsp_urls` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_post_quantum_key_exchange` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_secure_client_renegotiation` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_secure_renegotiation` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_session_resumption_ids` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_session_resumption_tickets` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_ssl_session_id_support` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_tls13_support` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_tls_extensions` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_tls_fallback_scsv` object, nullable - `skip` boolean, nullable - `issue_ssl_missing_tls_session_tickets` object, nullable - `skip` boolean, nullable - `issue_ssl_non_compliant_certificate_details` object, nullable - `skip` boolean, nullable - `issue_ssl_null_ciphers` object, nullable - `skip` boolean, nullable - `issue_ssl_rc4_cipher_usage` object, nullable - `skip` boolean, nullable - `issue_ssl_revoked_certificate_ocsp` object, nullable - `skip` boolean, nullable - `issue_ssl_robot_vulnerability` object, nullable - `skip` boolean, nullable - `issue_ssl_sha1_certificate_fingerprint` object, nullable - `skip` boolean, nullable - `issue_ssl_sslv2_support` object, nullable - `skip` boolean, nullable - `issue_ssl_suboptimal_average_strength_ciphers` object, nullable - `skip` boolean, nullable - `issue_ssl_sweet32_vulnerability` object, nullable - `skip` boolean, nullable - `issue_ssl_ticketbleed_vulnerability` object, nullable - `skip` boolean, nullable - `issue_ssl_tls10_support` object, nullable - `skip` boolean, nullable - `issue_ssl_tls11_support` object, nullable - `skip` boolean, nullable - `issue_ssl_untrusted_certificate` object, nullable - `skip` boolean, nullable - `issue_ssl_untrusted_certificate_authorities` object, nullable - `skip` boolean, nullable - `issue_ssl_weak_3des_idea_ciphers` object, nullable - `skip` boolean, nullable - `issue_ssl_weak_certificate_signature_algorithm` object, nullable - `skip` boolean, nullable - `issue_ssl_weak_cipher_negotiation` object, nullable - `skip` boolean, nullable - `issue_ssl_weak_low_security_ciphers` object, nullable - `skip` boolean, nullable - `issue_ssl_weak_pre_rfc_128bit_ciphers` object, nullable - `skip` boolean, nullable - `jdwp_debug_port_exposed` object, nullable - `skip` boolean, nullable - `ssrf` object, nullable - `skip` boolean, nullable - `ssti` object, nullable - `skip` boolean, nullable - `frontend_ssrf_header` object, nullable - `skip` boolean, nullable - `stacktrace` object, nullable - `skip` boolean, nullable - `subresource_integrity_missing` object, nullable - `skip` boolean, nullable - `multi_user_access_control` object, nullable - `skip` boolean, nullable - `main_user` string, nullable - `natural_language_rule` string, nullable - `other_users` object, nullable - `detect` unknown[], required - unknown - `specific_users` object, nullable - `paths` string[], nullable - `keys_matching` string[], nullable - `timeout` object, nullable - `skip` boolean, nullable - `unbound_session_token` object, nullable - `skip` boolean, nullable - `unreachable_server` object, nullable - `skip` boolean, nullable - `unsafe_function_use` object, nullable - `skip` boolean, nullable - `unusually_high_open_ports` object, nullable - `skip` boolean, nullable - `detection_threshold` number, nullable - `vue_development_build` object, nullable - `skip` boolean, nullable - `waf_bypass` object, nullable - `skip` boolean, nullable - `wildcard_ports_detected` object, nullable - `skip` boolean, nullable - `wordpress_oembed_endpoint_exposed` object, nullable - `skip` boolean, nullable - `wordpress_rdf_feed_user_exposed` object, nullable - `skip` boolean, nullable - `wordpress_rest_api_users_exposed` object, nullable - `skip` boolean, nullable - `wordpress_affiliatewp_log` object, nullable - `skip` boolean, nullable - `wordpress_db_backup` object, nullable - `skip` boolean, nullable - `wordpress_db_backup_listing` object, nullable - `skip` boolean, nullable - `wordpress_db_repair` object, nullable - `skip` boolean, nullable - `wordpress_debug_log` object, nullable - `skip` boolean, nullable - `wordpress_social_metrics_tracker` object, nullable - `skip` boolean, nullable - `wordpress_ssrf_oembed` object, nullable - `skip` boolean, nullable - `wordpress_total_upkeep_backup_download` object, nullable - `skip` boolean, nullable - `wordpress_wordfence_lfi` object, nullable - `skip` boolean, nullable - `wordpress_wordfence_waf_bypass_xss` object, nullable - `skip` boolean, nullable - `wordpress_wordfence_xss` object, nullable - `skip` boolean, nullable - `wordpress_wp_cron_exposed` object, nullable - `skip` boolean, nullable - `wordpress_xmlrpc_php_exposed` object, nullable - `skip` boolean, nullable - `wordpress_zebra_form_xss` object, nullable - `skip` boolean, nullable - `wp_insert_php_xss` object, nullable - `skip` boolean, nullable - `wp_phpfreechat_xss` object, nullable - `skip` boolean, nullable - `flask_session_cookie` object, nullable - `skip` boolean, nullable - `geovision_geowebserver_lfi_xss` object, nullable - `skip` boolean, nullable - `git_exposure` object, nullable - `skip` boolean, nullable - `svelte_development_build` object, nullable - `skip` boolean, nullable - `gitlab_weak_login` object, nullable - `skip` boolean, nullable - `glpi_default_login` object, nullable - `skip` boolean, nullable - `grafana_default_login` object, nullable - `skip` boolean, nullable - `infoblox_netmri_rails_cookie_rce` object, nullable - `skip` boolean, nullable - `influxdb_no_auth` object, nullable - `skip` boolean, nullable - `iotawatt_app_exposure` object, nullable - `skip` boolean, nullable - `jenkins_weak_password` object, nullable - `skip` boolean, nullable - `jolokia_tomcat_creds_leak` object, nullable - `skip` boolean, nullable - `joomla_com_booking_component` object, nullable - `skip` boolean, nullable - `joomla_com_fabrik_lfi` object, nullable - `skip` boolean, nullable - `joomla_department_sqli` object, nullable - `skip` boolean, nullable - `joomla_easyshop_lfi` object, nullable - `skip` boolean, nullable - `joomla_iproperty_xss` object, nullable - `skip` boolean, nullable - `joomla_jlex_xss` object, nullable - `skip` boolean, nullable - `joomla_jmarket_xss` object, nullable - `skip` boolean, nullable - `joomla_joombri_careers_xss` object, nullable - `skip` boolean, nullable - `joomla_jvehicles_lfi` object, nullable - `skip` boolean, nullable - `joomla_jvtwitter_xss` object, nullable - `skip` boolean, nullable - `joomla_marvikshop_sqli` object, nullable - `skip` boolean, nullable - `joomla_marvikshop_xss` object, nullable - `skip` boolean, nullable - `joomla_solidres_xss` object, nullable - `skip` boolean, nullable - `js_dangerous_eval` object, nullable - `skip` boolean, nullable - `issues_count_limit` number, nullable - `js_data_leak` object, nullable - `skip` boolean, nullable - `issues_count_limit` number, nullable - `js_exposed_api` object, nullable - `skip` boolean, nullable - `issues_count_limit` number, nullable - `js_hardcoded_secret` object, nullable - `skip` boolean, nullable - `issues_count_limit` number, nullable - `jupyter_notebook_rce` object, nullable - `skip` boolean, nullable - `kafka_center_default_login` object, nullable - `skip` boolean, nullable - `karaf_default_login` object, nullable - `skip` boolean, nullable - `kkfileview_ssrf` object, nullable - `skip` boolean, nullable - `kylin_default_login` object, nullable - `skip` boolean, nullable - `lucee_rce` object, nullable - `skip` boolean, nullable - `malwared_byob_rce` object, nullable - `skip` boolean, nullable - `mdb_database_file` object, nullable - `skip` boolean, nullable - `memcached_no_auth` object, nullable - `skip` boolean, nullable - `minio_default_login` object, nullable - `skip` boolean, nullable - `mssql_default_credentials` object, nullable - `skip` boolean, nullable - `mssql_exposed` object, nullable - `skip` boolean, nullable - `mysql_default_credentials` object, nullable - `skip` boolean, nullable - `mysql_exposed` object, nullable - `skip` boolean, nullable - `nginx_merge_slashes_path_traversal` object, nullable - `skip` boolean, nullable - `nginx_module_vts_xss` object, nullable - `skip` boolean, nullable - `nginx_proxy_manager_default_login` object, nullable - `skip` boolean, nullable - `nginx_webui_rce` object, nullable - `skip` boolean, nullable - `nginxwebui_runcmd_rce` object, nullable - `skip` boolean, nullable - `node_ecstatic_internal_path` object, nullable - `skip` boolean, nullable - `node_inspector_exposed` object, nullable - `skip` boolean, nullable - `nodered_default_login` object, nullable - `skip` boolean, nullable - `openmediavault_default_login` object, nullable - `skip` boolean, nullable - `opensearch_dashboard_default_login` object, nullable - `skip` boolean, nullable - `php_timeclock_xss` object, nullable - `skip` boolean, nullable - `php_xdebug_rce` object, nullable - `skip` boolean, nullable - `phpfpm_port_exposed` object, nullable - `skip` boolean, nullable - `php_zerodium_backdoor_rce` object, nullable - `skip` boolean, nullable - `phpldapadmin_xss` object, nullable - `skip` boolean, nullable - `phpmyadmin_default_login` object, nullable - `skip` boolean, nullable - `phpmyadmin_unauth_access` object, nullable - `skip` boolean, nullable - `phpok_sqli` object, nullable - `skip` boolean, nullable - `phpwiki_lfi` object, nullable - `skip` boolean, nullable - `psql_default_credentials` object, nullable - `skip` boolean, nullable - `potential_cve` object, nullable - `skip` boolean, nullable - `potentially_bruteforceable_login_form` object, nullable - `skip` boolean, nullable - `psql_exposed` object, nullable - `skip` boolean, nullable - `private_key_exposure` object, nullable - `skip` boolean, nullable - `rabbitmq_default_login` object, nullable - `skip` boolean, nullable - `rails6_xss` object, nullable - `skip` boolean, nullable - `ranger_default_login` object, nullable - `skip` boolean, nullable - `react2shell_1` object, nullable - `skip` boolean, nullable - `react2shell_2` object, nullable - `skip` boolean, nullable - `react_development_build` object, nullable - `skip` boolean, nullable - `rundeck_default_login` object, nullable - `skip` boolean, nullable - `rusty_joomla` object, nullable - `skip` boolean, nullable - `sangfor_cphp_rce` object, nullable - `skip` boolean, nullable - `secret_token_rb` object, nullable - `skip` boolean, nullable - `seeyon_createmysql_exposure` object, nullable - `skip` boolean, nullable - `selenium_exposure` object, nullable - `skip` boolean, nullable - `self_signed_ssl` object, nullable - `skip` boolean, nullable - `sonarqube_default_login` object, nullable - `skip` boolean, nullable - `ssh_default_credentials` object, nullable - `skip` boolean, nullable - `ssh_exposed` object, nullable - `skip` boolean, nullable - `ssh_password_auth_enabled` object, nullable - `skip` boolean, nullable - `default_credentials_used` object, nullable - `skip` boolean, nullable - `insecure_technology_used` object, nullable - `skip` boolean, nullable - `thinkphp6_arbitrary_write` object, nullable - `skip` boolean, nullable - `thinkphp_2_rce` object, nullable - `skip` boolean, nullable - `thinkphp_501_rce` object, nullable - `skip` boolean, nullable - `thinkphp_5023_rce` object, nullable - `skip` boolean, nullable - `thinkphp_509_information_disclosure` object, nullable - `skip` boolean, nullable - `tomcat_default_login` object, nullable - `skip` boolean, nullable - `tomcat_examples_login` object, nullable - `skip` boolean, nullable - `totp_secret_exposure` object, nullable - `skip` boolean, nullable - `totolink_n150rt_password_exposure` object, nullable - `skip` boolean, nullable - `twig_php_ssti` object, nullable - `skip` boolean, nullable - `twonky_server_exposure` object, nullable - `skip` boolean, nullable - `weaver_mysql_config_exposure` object, nullable - `skip` boolean, nullable - `webmin_default_login` object, nullable - `skip` boolean, nullable - `wordpress_accessible_wpconfig` object, nullable - `skip` boolean, nullable - `compromised_supply_chain` object, nullable - `skip` boolean, nullable - `zabbix_default_login` object, nullable - `skip` boolean, nullable - `dns_rebinding_attack` object, nullable - `skip` boolean, nullable - `dns_unauthenticated_dynamic_update` object, nullable - `skip` boolean, nullable - `dns_zone_transfer_any` object, nullable - `skip` boolean, nullable - `spoofable_spf_records_ptr_mechanism` object, nullable - `skip` boolean, nullable - `xxe` object, nullable - `skip` boolean, nullable - `inference` object, nullable - `scalars` object, nullable - `network` object, nullable - `request_timeout_s` number, nullable - `requests_per_second` number, nullable - `custom_headers` object, nullable - `max_duration` number, nullable: Deprecated: use `maxDurationMinutes` on the profile instead. - `port_scanning` object, nullable - `ports` number[], nullable - `service_discovery` object, nullable - `blocklist` object[], nullable - `type` 'domain', required - `value` string, required - `operation` 'equals' | 'starts_with' | 'ends_with' | 'contains' | 'regex' | 'wildcard' | 'null', nullable - `base_urls_delimiters` string[], nullable - `base_urls_wordlist` string[], nullable - `endpoints_wordlist` string[], nullable - `graphql_endpoints_wordlist` string[], nullable - `frontend_dast` object, nullable - `hotstart` string[], nullable - `security_checks_enabled` string[], nullable - `single_page_worker` boolean, nullable - `parallel_workers` number, nullable - `crawling_tuning` object, nullable - `max_unique_values_per_query_param` number, nullable - `max_unique_fragments_per_page` number, nullable - `max_parameterized_url_variations` number, nullable - `only_inscope_crawling_logs` boolean, nullable - `static_crawling` object, nullable - `enabled` boolean, nullable - `time_limit_seconds` number, nullable - `logout_detection` object, nullable - `enabled` boolean, nullable - `logged_in_indicator_regex_patterns` string[], nullable - `logout_redirection_url_patterns` string[], nullable - `session_cookie_regex_patterns` string[], nullable - `auto_reauthenticate` boolean, nullable - `agentic_detection_enabled` boolean, nullable - `check_url` string, nullable - `ignore_url_patterns` string[], nullable - `scope` object, nullable - `api_testing` object, nullable - `extend_global_scope` boolean, nullable - `allowlist` union[], nullable - union - … - `blocklist` union[], nullable - union - … - `crawling` object, nullable - `extend_global_scope` boolean, nullable - `allowlist` union[], nullable - union - … - `blocklist` union[], nullable - union - … - `in_scope_only` boolean, nullable - `agentic_crawling` object, nullable - `spa_crawling` boolean, nullable - `instructions` string, nullable - `max_duration` number, nullable: Deprecated: use `maxDurationMinutes` on the profile instead. - `mode` 'read_only' | 'read_write' | 'null', nullable - `graphql_api_dast` object, nullable - `url` string, nullable - `exploration_depth` 'light' | 'balanced' | 'deep' | 'null', nullable - `explore_with_all_users` boolean, nullable - `cross_user_memory_enabled` boolean, nullable - `max_generated_depth` number, nullable - `hotstart` string[], nullable - `hotstart_only` boolean, nullable - `scope` object, nullable - `extend_global_scope` boolean, nullable - `allowlist` union[], nullable - union - object - … - object - … - object - … - object - … - object - … - object - … - object - … - `blocklist` union[], nullable - union - object - … - object - … - object - … - object - … - object - … - object - … - object - … - `in_scope_only` boolean, nullable - `max_duration` number, nullable: Deprecated: use `maxDurationMinutes` on the profile instead. - `mode` 'read_only' | 'read_write' | 'null', nullable - `profile` 'surface' | 'cicd' | 'default' | 'deep' | 'unrestricted' | 'null', nullable - `rest_api_dast` object, nullable - `exploration_depth` 'light' | 'balanced' | 'deep' | 'null', nullable - `explore_with_all_users` boolean, nullable - `cross_user_memory_enabled` boolean, nullable - `hotstart` string[], nullable - `hotstart_only` boolean, nullable - `scope` object, nullable - `extend_global_scope` boolean, nullable - `allowlist` union[], nullable - union - object - … - object - … - object - … - object - … - object - … - object - … - object - … - `blocklist` union[], nullable - union - object - … - object - … - object - … - object - … - object - … - object - … - object - … - `query_params_are_required` boolean, nullable - `in_scope_only` boolean, nullable - `max_duration` number, nullable: Deprecated: use `maxDurationMinutes` on the profile instead. - `mode` 'read_only' | 'read_write' | 'null', nullable - `profile` 'surface' | 'cicd' | 'default' | 'deep' | 'unrestricted' | 'null', nullable - `automated_pentesting` object, nullable - `business_logic_agent` object, nullable - `enabled` boolean, nullable - `business_context` string, nullable - `idor_agent` object, nullable - `enabled` boolean, nullable - `natural_language` string, nullable - `multi_agent_pentest` object, nullable - `max_duration` number, nullable: Deprecated: use `maxDurationMinutes` on the profile instead. - `instructions` string, nullable - `mode` 'STANDARD' | 'STRICT' | 'null', nullable - `scope` object, nullable - `allowlist` union[], nullable - union - object - … - object - … - object - … - object - … - object - … - object - … - object - … - `blocklist` union[], nullable - union - object - … - object - … - object - … - object - … - object - … - object - … - object - … - `attack_vectors` string[], nullable - `repositories` object[], nullable - `uri` string, required - `selected_branch` string, required - `experimental` object, nullable - `blst_exploration_only` boolean, nullable - `regression_testing_file_upload_ids` string[], nullable - `asm_technologies` boolean, nullable - `external_crawling_task` boolean, nullable - `asm_cve_agent` boolean, nullable - `extended_port_scan` boolean, nullable - `feature_flags` string[], nullable - `har_collector_flush_threshold` number, nullable ## Response `200` OK - object ## Other responses - `400`: Bad Request - `404`: Not found --- [API](https://skmtc.dev/escape/apis/escape-public-api.md) - [All operations](https://skmtc.dev/escape/apis/escape-public-api/llms.txt) - [OpenAPI document](https://skmtc.dev/escape/apis/escape-public-api/revisions/2eab35df40c7?raw)