Step 1: Define Your Assessment Scope
- Navigate to AI Pentesting > Projects & Assessments.
- Click New Assessment.
- Provide an assessment title (e.g.,
Q4 Web Application Pentest). - Specify target root domains, API base URLs, or IP ranges.
- Define explicit out-of-scope endpoints (e.g.,
/auth/delete-account).
Step 2: Configure Rules of Engagement & Safety
- Select test intensity (Passive, Standard, or Aggressive).
- Set rate limits (e.g., maximum 20 requests per second).
- Choose Autonomous Mode (fully automated) or Human-in-the-Loop Mode (requires confirmation before executing high-impact exploits).
Step 3: Provide Test Credentials
Provide credentials for two different test user accounts to enable multi-tenant authorization and privilege escalation testing:- Test Account 1 (Standard User):
user1@test.com - Test Account 2 (Admin / Peer User):
user2@test.com
Step 4: Execute & Review Live Findings
- Click Start Assessment.
- Watch the AI agent stream its decision-making log, crawled attack tree, and validated findings in real time.