Security Penetration Tests

Create penetration test

Create an AI-powered penetration test run for an approved target and track the resulting findings and report artifacts.

post/v1/security-penetration-tests

Headers

X-Organization-Idstring

Organization ID (required for session auth, optional for API key auth)

Request body

targetUrlstring required

Target URL for the penetration test scan

repoUrlstring

Repository URL containing the target application code

Example request

{
  "targetUrl": "https://app.example.com",
  "repoUrl": "https://github.com/org/repo"
}

Response

Penetration test created

Changes

Changed in 5 of the 51 revisions of this API.104

    • removed the request property checks

      request-property-removed

    • removed the request property evidenceLevel

      request-property-removed

    • removed the request property pipelineTesting

      request-property-removed

    • removed the request property scanDepth

      request-property-removed

    • removed the request property testMode

      request-property-removed

    • removed the request property webhookUrl

      request-property-removed

    This revision also has 40 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

    • added the new optional request property checks

      new-optional-request-property

    • added the new optional request property evidenceLevel

      new-optional-request-property

    • added the new optional request property scanDepth

      new-optional-request-property

    • removed the request property configYaml

      request-property-removed

    • removed the request property githubToken

      request-property-removed

    • removed the request property workspace

      request-property-removed

    This revision also has 4 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

    • removed the request property mockCheckout

      request-property-removed

    This revision also has 2 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog

    • endpoint added

      endpoint-added