---
title: "Create penetration test"
method: POST
path: "/v1/security-penetration-tests"
tags: ["Security Penetration Tests"]
---

# Create penetration test

`POST /v1/security-penetration-tests`

Create an AI-powered penetration test run for an approved target and track the resulting findings and report artifacts.

## Headers

- `X-Organization-Id` string

## Request body

- CreatePenetrationTestDto
  - `targetUrl` string, required — Target URL for the penetration test scan
  - `repoUrl` string — Repository URL containing the target application code

## Response `201`

Penetration test created

## Other responses

- `400` — Invalid request payload

## Changes

- **2026-05-10** `912fecc0177c` — 6 warning
  - removed the request property `checks`
  - removed the request property `evidenceLevel`
  - removed the request property `pipelineTesting`
  - removed the request property `scanDepth`
  - …2 more
- **2026-05-01** `565998310724` — 3 info
  - added the new optional request property `checks`
  - added the new optional request property `evidenceLevel`
  - added the new optional request property `scanDepth`
- **2026-04-30** `e3da57681861` — 3 warning
  - removed the request property `configYaml`
  - removed the request property `githubToken`
  - removed the request property `workspace`
- **2026-03-05** `946edaa856a9` — 1 warning
  - removed the request property `mockCheckout`
- **2026-03-02** `9f44f6e28c23` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/om-network/apis/betayum-api/changes/v1/security-penetration-tests/post.md)

---

[API](https://skmtc.dev/om-network/apis/betayum-api.md) · [All operations](https://skmtc.dev/om-network/apis/betayum-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/om-network/betayum-api/revisions/95679a9aa625/schema)