Web & Network Testing
Test live web applications, APIs and network hosts from the outside, the way an attacker would. Available on Lite and above.
Test live web applications, APIs and network hosts from the outside, the way an attacker would. Available on Lite and above.
Web applications and APIs
Choose Web Application and enter a URL. Agents crawl the application, discover endpoints and parameters, and probe them for weaknesses. API endpoints are tested the same way, including authenticated routes.
What gets tested
- Access control — IDOR, privilege escalation, broken object and function level authorization.
- Injection — SQL, NoSQL, command and template injection.
- Cross-site scripting and client-side flaws — reflected, stored and DOM XSS, CSRF, prototype pollution.
- Server-side flaws — SSRF, XXE, insecure deserialization, file inclusion.
- Authentication and sessions — JWT weaknesses, session fixation, weak password reset flows, MFA gaps.
- Business logic — race conditions, workflow bypass, abuse of pricing or limits.
- Configuration — security headers, CORS, exposed admin panels, debug endpoints, verbose errors.
- Exposure — secrets and sensitive data in JavaScript, responses and historical URLs.
Testing behind a login
Provide credentials so agents test what an authenticated user can reach. Cyrion AI supports basic, bearer and API key authentication, custom cookies, form-based login flows and TOTP codes for two-factor accounts. Store credentials in the Secrets Vault so they never sit in a scan form.
Giving agents context
Upload API documentation or other context files, and use Rules of engagement and Additional instructions to describe what matters most, for example "the refund flow is the highest-risk feature".
IP addresses and networks
Choose IP Address and enter a single host or a CIDR range such as 10.0.0.0/24. Agents discover live hosts and open ports, fingerprint services and test them for known vulnerabilities and misconfigurations.
| Stage | What happens |
|---|---|
| Discovery | Host and port discovery across the range. |
| Fingerprinting | Service and version detection, technology and firewall identification. |
| Vulnerability checks | Template-based checks for known CVEs and common misconfigurations. |
| Validation | Exposures that can be exploited are proven, not just listed. |
Control the impact
- Set Max requests per second to keep load predictable on production systems.
- Use Avoid patterns for paths and hosts that must never be touched.
- Start with Quick or Standard, then step up to Aggressive or Thorough.
- On Hacker and above, Stealth mode routes traffic through Tor.
Warning: Scans send real attack traffic. Only scan assets you own or are authorized to test, and agree testing windows with the owners of any shared infrastructure.