> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Credentials & Authentication

> Configure authenticated scanning using Bearer tokens, OAuth2 flows, cookies, and client certificates.

Over 90% of critical web application vulnerabilities exist behind login screens. Authenticated scanning ensures thorough coverage of protected user flows.

***

## Supported Authentication Methods

* **Header Injection**: Static `Authorization: Bearer <token>` or custom API headers.
* **OAuth2 Token Refresh Flow**: Automate token acquisition using client credentials or refresh token grants.
* **Form-Based Login**: Automate login forms using automated credential submission and session cookie capture.
* **Mutual TLS (mTLS)**: Provide client certificates and private keys for enterprise zero-trust networks.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.