Pentest Lab

Orchestrate security agents against your repository

Target Repository

Target URL (optional — enables DAST & API probing)

DAST and API Security agents will probe this URL with read-only requests (GET/HEAD/OPTIONS only).

Select Agents

Static Application Security Testing — analyzes source code for vulnerabilities

Software Composition Analysis — checks dependencies for known vulnerabilities

Scans repository for leaked credentials, API keys, and sensitive data

Dockerfile and Docker Compose security analysis — root user, privileged mode, exposed ports

Passive security header analysis and information disclosure probing (requires target URL)

OpenAPI spec analysis, API route auth checks, and live endpoint probing

Audits CI/CD workflows, package.json, deployment configs, env files, and framework settings

Loading Pentest Lab...