Start Authorized Assessment

Dry run is selected by default. Real run executes bounded passive recon plus AI Gateway Hunt/Validate work after authorization, protected context, and typed confirmation are present.

Setup Wizard

Execution mode

Gateway-backed Hunt/Validate execution when AI Gateway credentials are present.

Target base URLRepository slugAllowed hostDerived from Target base URL. For hosted runs this must be a public authorized host, not localhost.

Selected model and attack classes

All 44

Fable 5 · api-multi-model · 44 classes · injection, broken-access-control, cryptographic-failures, security-misconfiguration, supply-chain-failures + 39 more

Max run budget (USD)

Runtime Credentials

Server credentials are used for downstream calls. A browser-session PlatPhorm key authenticates explicit operator actions when no Authorization header is present.

0 session keys

PlatPhorm API keyserver configured

Downstream PlatPhorm credential is present server-side; browser operator auth is still explicit.

Vercel AI Gateway keyserver configured

Used for model routing checks, future gateway-backed model calls.

Vercel tokenserver configured

Used for future sandbox job creation when server OIDC is unavailable.

PlatPhorm API keyserver

Direct provider keys are hidden because AI Gateway is configured server-side for model execution.

Result

No run launched yet.