Start Authorized Assessment

Dry run is selected by default. Real run executes bounded passive recon plus AI Gateway Hunt/Validate work after authorization, protected context, and typed confirmation are present.

Setup Wizard

Target base URLRepository slugAllowed host

Selected model and attack classes

All 44

Fable 5 · 44 classes · injection, broken-access-control, cryptographic-failures, security-misconfiguration, supply-chain-failures + 39 more

Max run budget (USD)

Runtime Credentials

Server credentials are used first. Browser-session keys are optional one-action overrides and are never rendered back.

0 session keys

PlatPhorm API keyserver configured

Used for real-run setup, protected integration previews, downstream PlatPhorm handoff.

Vercel AI Gateway keyserver configured

Used for model routing checks, future gateway-backed model calls.

Vercel tokenserver configured

Used for future sandbox job creation when server OIDC is unavailable.

Direct provider keys are hidden because AI Gateway is configured server-side for model execution.

No browser-session key entry is required for this deployment. Server-side credentials are ready for protected harness actions; explicit operator clicks and downstream confirmations are still required for sends and real runs.

Result

No run launched yet.