openapi: 3.1.0 info: version: 3.0.0 title: Escape Public Asm Beta API description: 'This API enables you to operate [Escape](https://escape.tech/) programmatically. All requests must be authenticated with a valid API key, provided in the `X-ESCAPE-API-KEY` header. For example: `X-ESCAPE-API-KEY: YOUR_API_KEY`. You can find your API key in the [Escape dashboard](https://app.escape.tech/user/).' servers: - url: https://public.escape.tech/v3 security: - apiKey: [] tags: - name: Beta description: 'Beta These endpoints are in beta and are subject to change.' paths: /profiles/ai-pentesting/rest: post: tags: - Beta summary: Create an Automated Pentest REST profile operationId: createPentestRestProfile description: Create an Automated Pentest REST profile. requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: assetId: type: string format: uuid description: The asset ID for the profile example: 00000000-0000-0000-0000-000000000000 configuration: type: string description: The scan configuration encoded as a JSON string (legacy public API contract). examples: - '{"authentication":{"users":[{"name":"public"}]}}' - '{"mode":"read_only"}' example: '{"authentication":{"users":[{"name":"public"}]}}' configurationObject: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The scan configuration as an object. Use this field for typed payloads; kept separate to preserve compatibility on `configuration`. example: authentication: users: - name: public cron: type: string description: The cron string example: 0 0 * * * name: type: string description: The name of the profile example: profile1 description: type: string maxLength: 2000 description: The description of the profile example: Weekly scan of the production API for compliance proxyId: type: - string - 'null' format: uuid description: The proxy ID for the profile example: 00000000-0000-0000-0000-000000000000 schemaId: type: string format: uuid description: The ID of the asset schema for the profile example: 00000000-0000-0000-0000-000000000000 tagsIds: type: - array - 'null' items: type: string format: uuid description: The tags IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 extraAssetIds: type: - array - 'null' items: type: string format: uuid description: The extra asset IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 useAllAvailableExtraAssets: type: boolean description: Whether to use all available extra assets for the profile example: false mode: type: string enum: - read_only - read_write description: Scan aggressiveness. `read_only` runs non-destructive tests and avoids state-changing operations (preferred for production targets). `read_write` runs exhaustive tests including mutations (use on pre-production, staging, or dedicated test environments). If omitted, the API uses `mode` from the configuration JSON when present; otherwise the profile defaults to `read_only`. When both this field and a nested `mode` exist, this top-level value wins. example: read_only start: type: boolean default: true description: Whether to start the scan immediately required: - assetId - name responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /profiles/ai-pentesting/graphql: post: tags: - Beta summary: Create an Automated Pentest GraphQL profile operationId: createPentestGraphqlProfile description: Create an Automated Pentest GraphQL profile. requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: assetId: type: string format: uuid description: The asset ID for the profile example: 00000000-0000-0000-0000-000000000000 configuration: type: string description: The scan configuration encoded as a JSON string (legacy public API contract). examples: - '{"authentication":{"users":[{"name":"public"}]}}' - '{"mode":"read_only"}' example: '{"authentication":{"users":[{"name":"public"}]}}' configurationObject: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The scan configuration as an object. Use this field for typed payloads; kept separate to preserve compatibility on `configuration`. example: authentication: users: - name: public cron: type: string description: The cron string example: 0 0 * * * name: type: string description: The name of the profile example: profile1 description: type: string maxLength: 2000 description: The description of the profile example: Weekly scan of the production API for compliance proxyId: type: - string - 'null' format: uuid description: The proxy ID for the profile example: 00000000-0000-0000-0000-000000000000 schemaId: type: string format: uuid description: The ID of the asset schema for the profile example: 00000000-0000-0000-0000-000000000000 tagsIds: type: - array - 'null' items: type: string format: uuid description: The tags IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 extraAssetIds: type: - array - 'null' items: type: string format: uuid description: The extra asset IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 useAllAvailableExtraAssets: type: boolean description: Whether to use all available extra assets for the profile example: false mode: type: string enum: - read_only - read_write description: Scan aggressiveness. `read_only` runs non-destructive tests and avoids state-changing operations (preferred for production targets). `read_write` runs exhaustive tests including mutations (use on pre-production, staging, or dedicated test environments). If omitted, the API uses `mode` from the configuration JSON when present; otherwise the profile defaults to `read_only`. When both this field and a nested `mode` exist, this top-level value wins. example: read_only start: type: boolean default: true description: Whether to start the scan immediately required: - assetId - name responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /profiles/ai-pentesting/webapp: post: tags: - Beta summary: Create an Automated Pentest WebApp profile operationId: createPentestWebappProfile description: Create an Automated Pentest WebApp profile. requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: assetId: type: string format: uuid description: The asset ID for the profile example: 00000000-0000-0000-0000-000000000000 configuration: type: string description: The scan configuration encoded as a JSON string (legacy public API contract). examples: - '{"authentication":{"users":[{"name":"public"}]}}' - '{"mode":"read_only"}' example: '{"authentication":{"users":[{"name":"public"}]}}' configurationObject: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The scan configuration as an object. Use this field for typed payloads; kept separate to preserve compatibility on `configuration`. example: authentication: users: - name: public cron: type: string description: The cron string example: 0 0 * * * name: type: string description: The name of the profile example: profile1 description: type: string maxLength: 2000 description: The description of the profile example: Weekly scan of the production API for compliance proxyId: type: - string - 'null' format: uuid description: The proxy ID for the profile example: 00000000-0000-0000-0000-000000000000 schemaId: type: string format: uuid description: The ID of the asset schema for the profile example: 00000000-0000-0000-0000-000000000000 tagsIds: type: - array - 'null' items: type: string format: uuid description: The tags IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 extraAssetIds: type: - array - 'null' items: type: string format: uuid description: The extra asset IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 useAllAvailableExtraAssets: type: boolean description: Whether to use all available extra assets for the profile example: false mode: type: string enum: - read_only - read_write description: Scan aggressiveness. `read_only` runs non-destructive tests and avoids state-changing operations (preferred for production targets). `read_write` runs exhaustive tests including mutations (use on pre-production, staging, or dedicated test environments). If omitted, the API uses `mode` from the configuration JSON when present; otherwise the profile defaults to `read_only`. When both this field and a nested `mode` exist, this top-level value wins. example: read_only start: type: boolean default: true description: Whether to start the scan immediately required: - assetId - name responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /scans/emails: get: tags: - Beta summary: List inbox emails operationId: listInboxEmails description: Given a target email address, list inbox emails with cursor pagination. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: array items: type: string format: uuid description: Filter by email IDs example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 required: false description: Filter by email IDs name: ids in: query - schema: type: string format: date-time description: Filter by before date example: '2025-03-15T09:00:00Z' required: false description: Filter by before date name: before in: query - schema: type: string format: date-time description: Filter by after date example: '2025-03-15T09:00:00Z' required: false description: Filter by after date name: after in: query - schema: type: string format: email description: Inbox email address used as `to` filter example: demo.0100519e@scan.escape.tech required: true description: Inbox email address used as `to` filter name: email in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The email identifier createdAt: type: string format: date-time description: The date and time the email was created from: type: string description: The sender email address subject: type: string description: The email subject required: - id - createdAt - from - subject title: ScanEmailSummary description: Summarized information about an inbox email required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /scans/emails/{id}: get: tags: - Beta summary: Read inbox email content operationId: readInboxEmail description: Given an email id, fetch and return its full raw content. parameters: - schema: type: string format: uuid description: The inbox email ID example: 00000000-0000-0000-0000-000000000000 required: true description: The inbox email ID name: id in: path responses: '200': description: Inbox email details with body content: application/json: schema: type: object properties: id: type: string format: uuid description: The email identifier createdAt: type: string format: date-time description: The date and time the email was created from: type: string description: The sender email address subject: type: string description: The email subject body: type: string description: The email body required: - id - createdAt - from - subject - body title: ScanEmailDetails description: Detailed information about an inbox email including body '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist '500': description: Internal Server Error content: application/json: schema: type: object properties: message: type: string enum: - Internal Server Error details: type: string required: - message - details title: InternalServerError description: Returned when the server fails to fulfil the request /jobs: post: tags: - Beta summary: Trigger a template export job operationId: triggerExport description: 'Schedules the same export job as the product UI (SAAS_EXPORT_TEMPLATE): PDF/report blocks, optional scan and issue scope. Use GET /jobs/{jobId} to read status and artefact download URLs when completed.' requestBody: content: application/json: schema: type: object properties: blocks: type: array items: type: object properties: kind: type: string enum: - AI_ANALYSIS - ASSETS_SUMMARY - COMPLIANCE_COVERAGE - COMPLIANCE_CRA - COMPLIANCE_CWE - COMPLIANCE_DORA - COMPLIANCE_FEDRAMP - COMPLIANCE_GDPR - COMPLIANCE_HIPAA - COMPLIANCE_HITRUST_CSF - COMPLIANCE_IEC62443 - COMPLIANCE_ISO27001 - COMPLIANCE_MITRE_ATTACK - COMPLIANCE_NIS2 - COMPLIANCE_NIST - COMPLIANCE_OWASP - COMPLIANCE_OWASP_ASVS - COMPLIANCE_OWASP_LLM - COMPLIANCE_PCI_DSS - COMPLIANCE_PSD2 - COMPLIANCE_SOC2 - COMPLIANCE_WASC - ISSUE_DETAIL - ISSUE_LIST - ISSUE_SUMMARY - SCAN_HISTORY_TREND - SCAN_SUMMARY params: description: Block-specific JSON parameters (optional). required: - kind minItems: 1 description: Report blocks to include, in order. scanId: type: string format: uuid description: Restrict scope to a scan (optional). dry: type: boolean description: If true, validates selection only and does not schedule a job. assetWhere: description: GraphQL AssetWhereInput JSON (optional); narrows assets like the internal API. profileWhere: description: GraphQL ProfilesWhereInput JSON (optional). issueWhere: description: GraphQL IssueWhereInput JSON (optional); defaults if omitted when using scan/profile scope. required: - blocks responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: ID of the scheduled export job (template generation). required: - id '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /jobs/{jobId}: get: tags: - Beta summary: Get a job operationId: getJob description: Returns job status, parameters, and artefacts (including signedUrl download links for completed export outputs). parameters: - schema: type: string format: uuid description: The job ID example: 00000000-0000-0000-0000-000000000000 required: true description: The job ID name: jobId in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid status: type: string enum: - COMPLETED - FAILED - PENDING - RUNNING kind: type: string enum: - INTEGRATION_WIZ_RESEND_ISSUES - MAINTENANCE_MIGRATE_PROFILE - MAINTENANCE_RECOMPUTE_ISSUES_FULLNAME - SAAS_AI_FALSE_POSITIVE_DETECTION - SAAS_AI_FALSE_POSITIVE_DETECTION_ON_ISSUE - SAAS_ARCHIVE_SCAN - SAAS_ARTEFACTS_S3_MIGRATION - SAAS_ASSET_FILES_S3_MIGRATION - SAAS_ASSET_SCHEMA_S3_MIGRATION - SAAS_ATTACHMENTS_S3_MIGRATION - SAAS_BATCHED_SCHEDULE_ASM_SCANS - SAAS_BATCHED_UPDATE_CACHED_DATA - SAAS_BATCHED_UPDATE_ISSUE_COUNTS - SAAS_BULK_CREATE_ASSETS - SAAS_CANCEL_RUNNING_SCANS - SAAS_CHECK_LOCATION_DOWN - SAAS_DELETE_APPLICATION - SAAS_DELETE_ASSETS - SAAS_DELETE_INTEGRATION - SAAS_DELETE_ORGANIZATION - SAAS_DELETE_PROJECT - SAAS_END_SCAN_ROUTINE - SAAS_EVENTS_ARCHIVE_GENERATION - SAAS_EXCHANGES_ARCHIVE_GENERATION - SAAS_EXECUTE_WORKFLOW - SAAS_EXPORT_TEMPLATE - SAAS_GENERATE_ISSUE_REMEDIATION - SAAS_MIGRATE_WORKFLOWS_FILTERS - SAAS_POPULATE_ISSUE_SCAN_MTM - SAAS_PROCESS_AGENTIC_LOGS - SAAS_PROCESS_FILE_UPLOAD - SAAS_REBUILD_ASSET_LINKS - SAAS_RECOMPUTE_ASSET_RISKS - SAAS_SCHEDULE_DEFAULT_VIEWS_SEED - SAAS_SCHEDULE_ISSUE_SCAN_MTM_POPULATION - SAAS_SCHEDULE_WORKFLOWS - SAAS_SCHEDULE_WORKFLOWS_FILTERS_MIGRATION - SAAS_SEED_DEFAULT_VIEWS - SAAS_START_ASM_SCAN - SAAS_TEMPORARY_SYNC_SCHEMAS_AND_SERVICES - SAAS_UPSERT_ASM_PROFILES - SEND_JOB_ARTEFACTS_BY_EMAIL - TEST_KIND createdAt: type: string scheduledAt: type: - string - 'null' triggeredAt: type: - string - 'null' completedAt: type: - string - 'null' parameters: {} artefacts: type: array items: type: object properties: id: type: string format: uuid kind: type: string enum: - AUDITOR_REPORT - EVENTS_ARCHIVE - EXCHANGES_ARCHIVE - EXECUTIVE_REPORT - EXPORT_JOB_RESULT name: type: string signedUrl: type: string createdAt: type: string updatedAt: type: string required: - id - kind - name - signedUrl - createdAt - updatedAt title: JobArtefact description: An artefact produced by a job; signedUrl is a time-limited download link. required: - id - status - kind - createdAt - scheduledAt - triggeredAt - completedAt - artefacts '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist components: securitySchemes: apiKey: type: apiKey in: header name: X-ESCAPE-API-KEY