FAQ

General

What is Cyrion AI?

Cyrion AI is an autonomous penetration-testing platform. AI agents explore your application, exploit the weaknesses they find and validate each one with a proof of concept. See the Introduction.

Do I need to install anything?

No. Cyrion AI runs entirely in the app. For automation, use the REST API.

Is there a command-line tool?

No. Everything, including integrations and CI/CD, is configured in the app or through the REST API.

Is it safe to run against production?

Scans send real attack traffic, so start on staging. For production, set a request-rate limit, list paths to avoid in your rules of engagement and schedule scans for quiet hours. See Best Practices.

Am I allowed to scan any target?

No. You must own the target or have written authorization. Every scan requires you to sign an engagement and authorization agreement, and the signature is recorded.

Findings

How does Cyrion AI avoid false positives?

Agents build a working proof of concept for every candidate vulnerability and re-run it before it is reported. Findings carry the proof, a validation status and a confidence score. See Findings & Validation.

How do I verify a fix?

Open the finding and choose Retest. Cyrion AI runs a focused scan against that single issue.

Can I send findings to my ticketing system?

Yes. Connect Jira or GitHub from Integrations, then send any finding as a ticket.

Scanning

Which scan mode should I use?

Quick for a 30-minute check of critical issues, Standard for balanced coverage, Aggressive for deep testing and Thorough for maximum coverage. Aggressive and Thorough need the Hacker plan. See Scan Modes.

Can Cyrion AI test behind a login or two-factor authentication?

Yes. It supports basic, bearer and API key authentication, custom cookies, form-based logins and TOTP codes.

Can I schedule scans?

Yes. Choose Schedule for later in the wizard, and view upcoming scans in Projects → Calendar.

Can I run several scans at once?

Lite runs one scan at a time, Hacker up to three and Red Team up to five. Enterprise is unlimited.

What happens if I run out of credits mid-scan?

The scan pauses instead of failing. Add credits, then resume it.

Can I test mobile apps, cloud accounts or AI applications?

Mobile apps (APK and IPA) are available on Hacker and above. Cloud accounts (AWS, Azure, GCP) and AI applications are available on the Red Team plan and above. See Supported Targets.

Plans and billing

How many credits does each plan include?

Lite includes 200 credits a month, Hacker 3,000, Red Team 8,000 and Enterprise is unlimited. See Credits & Usage.

Can I change plans?

Yes, from Settings → Subscription. Downgrading never deletes your scans, findings or reports.

Can I try before I pay?

Yes. The Free plan includes a complete demo scan and sample report.

Security and data

How are my credentials protected?

Credentials in the Secrets Vault are stored encrypted. Scans reference them by ID, so the secret itself is never written into scan settings.

Where do scans run?

Each scan runs in its own isolated environment with the security toolkit pre-installed.

Does Cyrion AI have access to my cloud account?

Only the access you grant. Create a dedicated read-only identity for cloud scans and revoke it whenever you like.

Support

For help with your account, use the in-app Help Center from your profile menu. For Enterprise plans, contact our sales team.