Dashboard / New Scan

New scan

Point it at a target, prove you're allowed to test it, and launch. Everything else is optional.

Enter Target

Verify Ownership

Launch Scan

1 Target & scan type

Target Domain or URL

🌐

2 Verify you're authorized

Identity Verification Verified

📋 Asset Owner

Verify via DNS TXT record

🎯 Authorized Auditor

Verify with Platform ID (Internal/Pentest Authority)

Enter your domain above, then click the button below to get your unique verification record.

Type

TXT

Host / Name

Value

—

Add this TXT record to your domain's DNS settings, wait a few minutes for propagation, then click Verify below.

✅ DNS TXT record verified. Ownership confirmed.

Security Program URL (optional)

🔗

Your Security Profile URL (optional)

👤

I confirm I have authorized access to this target and agree to non-intrusive audit mode with Safe Harbor protections.

🔒

Local Context Trusted via Agent

Identity verification bypassed for localhost / private IP targets routed through your agent.

You've used all your available scans.

View Plans

Advanced options Agents, scope, auth, deep modules — all optional ▸

🤖 Remote Agent Mode HYBRID ▸

Route to Remote Agent

Execute scans on your own infrastructure. Enables internal networks, localhost, and air-gapped targets.

Manage Agents →

🛡 Scope Guard ▸

Full Estate Discovery Requires DNS Verification

Passive discovery only for subdomains. Active scanning on root domain only.

Advanced Scope Rules

Paste Out-of-Scope list from your security program

Domains, wildcards, IPs, CIDR ranges, and path patterns.

🔑 Authenticated Scan Optional ▸

Enable Authenticated Scanning

Provide credentials to unlock IDOR, JWT analysis, rate-limit bypass, mass assignment, and race condition testing.

Session A — Admin / PrivilegedUsed for IDOR & access control tests

🛡

Session B — Victim / Low-privCompared against Session A for IDOR confirmation

👤

How to get your session cookie

Open the target in your browser and log in as the account you want to test with.
Press F12 to open DevTools → go to the Application tab (Chrome) or Storage tab (Firefox).
Click Cookies → select the target domain.
Find the session cookie (often named session, auth_token, JSESSIONID, connect.sid, or similar).
Copy the Name=Value pairs and paste them above, separated by ;

Tip: Use the Login Form tab to auto-capture cookies instead of doing this manually.

Bearer Token / JWTApplied to all scan modules — do NOT include "Bearer " prefix

🔑

JWT tokens are automatically analyzed for alg:none bypass, weak secrets, and sensitive payload exposure.

Basic Auth Credentialsusername:password — will be base64-encoded automatically

🔓

Format: username:password. Sent as Authorization: Basic header on all authenticated probes.

Enter your credentials — SecRecon will log in for you and capture the session cookie automatically.

URL

🌐

Username / EmailAdmin or privileged account

👤

Username / EmailLow-privilege account (optional)

👤

Password (Session A)Not stored — used once to capture cookie

🔒

Password (Session B)Optional — for IDOR dual-session testing

🔒

Differential Testing (A vs B)

🧪 Deep Scan Modules ▸

Some bug bounty programs prohibit rate-limit/DoS-style testing — disable that module for those targets.

📁 Sensitive Paths 🔐 JWT Analyzer 🚫 Rate Limit Bypass 📦 Mass Assignment ⚡ Race Conditions 🔍 IDOR / BOLA

✅ Verification Proof Mode ▸

Audit-Grade Verification

Only include findings with a verified OAST callback. Ensures 100% proof-backed output.

Verified-Only Report Mode

Every finding includes a confirmed PoC curl command. Ideal for client deliverables.

⚡ Offensive Mode

Removes rate limits (50 RPS), enables full payload depth. Use only on authorized targets.

🤖 AI Scan Focus NEW ▸

Describe what to focus on. The AI will configure the scan automatically.

📋 Export & Integrations PRO ▸

Compliance Framework

Engagement Type

Push Findings To

Jira Linear Slack

Configure credentials in Settings.

📨 Compliance Headers ▸

Audit Standard

Custom HTTP headers injected into every request. Selecting a standard auto-populates research headers.

Target — Type — Protocol — Est. — Mode Quick Recon

OAST Listener: Online

🛡

Pre-Flight Scope Guard

Define any out-of-scope assets before scanning. These will be excluded from all scanning modules and the final report.

Paste Out-of-Scope Assets (Optional)

Supports domains, wildcards, IPs, CIDR ranges, and path patterns (/internal/*).

Active Scan Scanning

🔍

Recon

Nmap + tech detection

🚨

CVE Intel

CVE + IAM/Cloud

🧠

AI Analysis

Attack surface

🎯

Hunting

Template scans

🛡

FP Filter

AI + CVSS

📝

Report

AI synthesis

INITIALIZING

Waiting for scan to start...

OAST Oracle Active

Total: 0 DNS: 0 HTTP: 0

—

View Live Logs ↗

💻 Live Agent Log

📊 Scan Results Complete

Total Probed

Verified Criticals

Potential Risks

System Health

Filtered:

OWASP Top 10 Radar

Severity Distribution

Confidence Breakdown

Finding Categories

Attack Path Map

Recon Entry Exploit Impact

No attack chains detected for this scan. The visualizer requires at least two related findings that form a logical attack path.

BREACH PATHS

📋 Export & Push

Download PDF Report

⚡ Pentest Export

⚙ Integration Settings

Slack

Jira

Linear

👥 Assign to Team

Create New Team

Join Team via Invite

⏏

🛡

Continuous Monitoring

Schedule

Slack Webhook URL for delta alerts

Slack Channel (optional)

Alert on new Critical Alert on new High

Enable continuous monitoring (activate delta alerts)

🚫 FP Suppression Rules

Findings marked FP 3+ times are auto-suppressed for this target.

Book a Demo

See how SecRecon can secure your attack surface. Our team will reach out within 24 hours.

Full Name *

Work Email *

Phone

Company

I am a... *

Anything else we should know?

Authentication Required