openapi: 3.1.0 info: version: 3.0.0 title: Escape Public Asm Profiles API description: 'This API enables you to operate [Escape](https://escape.tech/) programmatically. All requests must be authenticated with a valid API key, provided in the `X-ESCAPE-API-KEY` header. For example: `X-ESCAPE-API-KEY: YOUR_API_KEY`. You can find your API key in the [Escape dashboard](https://app.escape.tech/user/).' servers: - url: https://public.escape.tech/v3 security: - apiKey: [] tags: - name: Profiles description: 'A Profile is a configuration for the DAST scanning feature. It includes various parameters such as authentication details, environment settings, a schema... Profiles allow you to start scans on an endpoint and will keep track of the scan history. This ensures consistency in repeated scans and helps track changes or improvements over time. See [our documentation](https://docs.escape.tech/documentation/#profile) for more details.' paths: /profiles: get: tags: - Profiles summary: List profiles operationId: listProfiles description: List and search profiles of the organization. parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - LAST_SCAN - NAME - SCORE - SEVERITY description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by asset IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by asset IDs name: assetIds in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by domain example: example.com,example.org required: false description: Filter by domain name: domains in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by issue IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by issue IDs name: issueIds in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by tag IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by tag IDs name: tagIds in: query - schema: type: string description: Search term to filter profiles by name or description example: profile1 required: false description: Search term to filter profiles by name or description name: search in: query - schema: type: array items: type: string enum: - APPLICATION_CREATION - CI - INVENTORY - MANUAL - SCHEDULED - UNKNOWN description: Filter by initiator required: false description: Filter by initiator name: initiators in: query - schema: type: array items: type: string enum: - ASM_AKAMAI_ACCOUNT - ASM_AWS_ACCOUNT - ASM_AWS_LAMBDA - ASM_AZURE_TENANT - ASM_BITBUCKET_ORGANIZATION - ASM_BITBUCKET_REPOSITORY - ASM_BURPSUITE_EXPORT - ASM_CLOUDFLARE_ACCOUNT - ASM_CODE_PROJECT - ASM_DNS - ASM_GCP_PROJECT - ASM_GITHUB_ORGANIZATION - ASM_GITHUB_REPOSITORY - ASM_GITLAB_GROUP - ASM_GITLAB_REPOSITORY - ASM_GRAPHQL - ASM_GRAPHQL_SCHEMA - ASM_GRPC - ASM_HAR_EXPORT - ASM_INSOMNIA - ASM_IPV4 - ASM_IPV4_RANGE - ASM_IPV6 - ASM_KUBERNETES_CLUSTER - ASM_MCP - ASM_OPENAPI - ASM_PACKAGE - ASM_POSTMAN_COLLECTION - ASM_POSTMAN_ENVIRONMENT - ASM_POSTMAN_ORGANIZATION - ASM_REST - ASM_SOAP - ASM_SOFTWARE - ASM_WEBAPP - ASM_WEBSOCKET - ASM_WIZ_ACCOUNT - ASM_WP_JSON - AUTOMATED_PENTEST_GRAPHQL - AUTOMATED_PENTEST_REST - AUTOMATED_PENTEST_WEBAPP - BLST_GRAPHQL - BLST_REST - FRONTEND_DAST description: Filter by kind required: false description: Filter by kind name: kinds in: query - schema: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: Filter by risk required: false description: Filter by risk name: risks in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile createdAt: type: string description: The date and time the profile was created initiators: type: array items: type: string enum: - APPLICATION_CREATION - CI - INVENTORY - MANUAL - SCHEDULED - UNKNOWN description: The initiators of the profile cron: type: - string - 'null' description: The cron of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, or the legacy `assetSchemaId` when the link is not yet visible in `extraAssets`. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: Extra assets linked to the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile score: type: - number - 'null' description: Security score of the last scan (0-100). Null if no scan has completed. coverage: type: - number - 'null' description: Coverage ratio of the last scan (0-1). Null if no scan has completed. openIssueCount: type: - integer - 'null' description: Number of open issues across all scans for this profile. lastScanStatus: type: - string - 'null' description: Status of the most recent scan (e.g. FINISHED, RUNNING, FAILED). links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - createdAt - initiators - cron - schemaAssetId - extraAssets - asset - links title: ProfileSummarized description: Summarized information about a profile required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied /profiles/problems: get: tags: - Profiles summary: List all scan statuses and problems operationId: problems description: List all scan statuses and problems parameters: - schema: type: string description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. example: R1BDOlM6NTEwMzk4NTYtNGIyOS00NTlkLTg0ZDYtMWJhYjM0NWMzZjU5 required: false description: The cursor to start the pagination from. Returned by the previous page response. If not provided, the first page will be returned. name: cursor in: query - schema: type: integer minimum: 1 maximum: 100 default: 50 description: The number of items to return per page example: 50 required: false description: The number of items to return per page name: size in: query - schema: type: string enum: - LAST_SCAN - NAME - SCORE - SEVERITY description: The type to sort by required: false description: The type to sort by name: sortType in: query - schema: type: string enum: - asc - desc default: asc description: The direction to sort by required: false description: The direction to sort by name: sortDirection in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by asset IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by asset IDs name: assetIds in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by domain example: example.com,example.org required: false description: Filter by domain name: domains in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by issue IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by issue IDs name: issueIds in: query - schema: anyOf: - type: string - type: array items: type: string description: Filter by tag IDs example: 00000000-0000-0000-0000-000000000000,00000000-0000-0000-0000-000000000001 required: false description: Filter by tag IDs name: tagIds in: query - schema: type: string description: Search term to filter profiles by name or description example: profile1 required: false description: Search term to filter profiles by name or description name: search in: query - schema: type: array items: type: string enum: - APPLICATION_CREATION - CI - INVENTORY - MANUAL - SCHEDULED - UNKNOWN description: Filter by initiator required: false description: Filter by initiator name: initiators in: query - schema: type: array items: type: string enum: - ASM_AKAMAI_ACCOUNT - ASM_AWS_ACCOUNT - ASM_AWS_LAMBDA - ASM_AZURE_TENANT - ASM_BITBUCKET_ORGANIZATION - ASM_BITBUCKET_REPOSITORY - ASM_BURPSUITE_EXPORT - ASM_CLOUDFLARE_ACCOUNT - ASM_CODE_PROJECT - ASM_DNS - ASM_GCP_PROJECT - ASM_GITHUB_ORGANIZATION - ASM_GITHUB_REPOSITORY - ASM_GITLAB_GROUP - ASM_GITLAB_REPOSITORY - ASM_GRAPHQL - ASM_GRAPHQL_SCHEMA - ASM_GRPC - ASM_HAR_EXPORT - ASM_INSOMNIA - ASM_IPV4 - ASM_IPV4_RANGE - ASM_IPV6 - ASM_KUBERNETES_CLUSTER - ASM_MCP - ASM_OPENAPI - ASM_PACKAGE - ASM_POSTMAN_COLLECTION - ASM_POSTMAN_ENVIRONMENT - ASM_POSTMAN_ORGANIZATION - ASM_REST - ASM_SOAP - ASM_SOFTWARE - ASM_WEBAPP - ASM_WEBSOCKET - ASM_WIZ_ACCOUNT - ASM_WP_JSON - AUTOMATED_PENTEST_GRAPHQL - AUTOMATED_PENTEST_REST - AUTOMATED_PENTEST_WEBAPP - BLST_GRAPHQL - BLST_REST - FRONTEND_DAST description: Filter by kind required: false description: Filter by kind name: kinds in: query - schema: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: Filter by risk required: false description: Filter by risk name: risks in: query responses: '200': description: OK content: application/json: schema: type: object properties: nextCursor: type: - string - 'null' totalCount: type: integer default: 100 example: 20 data: type: array items: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan problems: type: array items: type: object properties: code: type: string description: The problem code message: type: string description: The problem message severity: type: string description: The problem severity required: - code - message - severity description: The problems found in the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links - problems title: ScanSummarizedWithProblems description: The most recent scan status and problems for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan problems: type: array items: type: object properties: code: type: string description: The problem code message: type: string description: The problem message severity: type: string description: The problem severity required: - code - message - severity description: The problems found in the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links - problems title: ScanSummarizedWithProblems description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true required: - id - name - lastScan - lastResourceScan title: ProfileScanProblemsRow description: Profile with last scan status and scan problems required: - nextCursor - data '400': description: Pagination error content: application/json: schema: type: object properties: message: type: string enum: - Invalid cursor details: type: string required: - message - details title: PaginationError description: Returned when an invalid pagination cursor is supplied /profiles/{profileId}: get: tags: - Profiles summary: Get a profile operationId: getProfile description: Get a profile by ID parameters: - schema: type: string description: The profile ID example: 00000000-0000-0000-0000-000000000000 required: true description: The profile ID name: profileId in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist put: tags: - Profiles summary: Update a profile operationId: updateProfile description: Update a profile of a given scanner kind parameters: - schema: type: string description: The profile ID example: 00000000-0000-0000-0000-000000000000 required: true description: The profile ID name: profileId in: path requestBody: description: Body of the request to update a profile content: application/json: schema: type: object properties: name: type: string description: The name of the profile example: profile1 description: type: string maxLength: 2000 description: The description of the profile example: Weekly scan of the production API for compliance cron: type: string description: The cron of the profile example: 0 0 * * * extraAssetIds: anyOf: - type: string - type: array items: type: string description: The extra asset ID for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist delete: tags: - Profiles summary: Delete a profile operationId: deleteProfile description: Delete a profile by ID parameters: - schema: type: string description: The profile ID example: 00000000-0000-0000-0000-000000000000 required: true description: The profile ID name: profileId in: path responses: '200': description: OK content: application/json: schema: type: object properties: message: type: string required: - message '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist /profiles/{profileId}/configuration: put: tags: - Profiles summary: Update profile configuration operationId: updateProfileConfiguration description: Update the configuration of a profile parameters: - schema: type: string description: The profile ID example: 00000000-0000-0000-0000-000000000000 required: true description: The profile ID name: profileId in: path requestBody: description: Body of the request to update profile configuration content: application/json: schema: type: object properties: configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The configuration to update required: - configuration responses: '200': description: OK content: application/json: schema: type: object additionalProperties: {} '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist /profiles/{profileId}/schema: put: tags: - Profiles summary: Update profile schema operationId: updateProfileSchema description: ' *This route is deprecated, use the [PUT /profiles/:profileId](#tag/profiles/PUT/profiles/:profileId) endpoint instead.* Update the schema used to scan this profile. The schema ID is the ID of a schema uploaded to the Escape Platform using the [POST /assets/schema](#tag/assets/POST/assets/schema) endpoint. ' deprecated: true parameters: - schema: type: string description: The profile ID example: 00000000-0000-0000-0000-000000000000 required: true description: The profile ID name: profileId in: path requestBody: description: Body of the request to update profile schema content: application/json: schema: type: object properties: schemaId: type: string description: The asset schema ID example: 00000000-0000-0000-0000-000000000000 required: - schemaId responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist /profiles/rest: post: tags: - Profiles summary: Create a DAST REST profile operationId: createDastRestProfile description: Create a DAST REST profile. requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: assetId: type: string format: uuid description: The asset ID for the profile example: 00000000-0000-0000-0000-000000000000 configuration: type: string description: The scan configuration encoded as a JSON string (legacy public API contract). examples: - '{"authentication":{"users":[{"name":"public"}]}}' - '{"mode":"read_only"}' example: '{"authentication":{"users":[{"name":"public"}]}}' configurationObject: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The scan configuration as an object. Use this field for typed payloads; kept separate to preserve compatibility on `configuration`. example: authentication: users: - name: public cron: type: string description: The cron string example: 0 0 * * * name: type: string description: The name of the profile example: profile1 description: type: string maxLength: 2000 description: The description of the profile example: Weekly scan of the production API for compliance proxyId: type: - string - 'null' format: uuid description: The proxy ID for the profile example: 00000000-0000-0000-0000-000000000000 schemaId: type: string format: uuid description: The ID of the asset schema for the profile example: 00000000-0000-0000-0000-000000000000 tagsIds: type: - array - 'null' items: type: string format: uuid description: The tags IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 extraAssetIds: type: - array - 'null' items: type: string format: uuid description: The extra asset IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 useAllAvailableExtraAssets: type: boolean description: Whether to use all available extra assets for the profile example: false mode: type: string enum: - read_only - read_write description: Scan aggressiveness. `read_only` runs non-destructive tests and avoids state-changing operations (preferred for production targets). `read_write` runs exhaustive tests including mutations (use on pre-production, staging, or dedicated test environments). If omitted, the API uses `mode` from the configuration JSON when present; otherwise the profile defaults to `read_only`. When both this field and a nested `mode` exist, this top-level value wins. example: read_only start: type: boolean default: true description: Whether to start the scan immediately required: - assetId - name responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /profiles/graphql: post: tags: - Profiles summary: Create a DAST GraphQL profile operationId: createDastGraphqlProfile description: Create a DAST GraphQL profile. requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: assetId: type: string format: uuid description: The asset ID for the profile example: 00000000-0000-0000-0000-000000000000 configuration: type: string description: The scan configuration encoded as a JSON string (legacy public API contract). examples: - '{"authentication":{"users":[{"name":"public"}]}}' - '{"mode":"read_only"}' example: '{"authentication":{"users":[{"name":"public"}]}}' configurationObject: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The scan configuration as an object. Use this field for typed payloads; kept separate to preserve compatibility on `configuration`. example: authentication: users: - name: public cron: type: string description: The cron string example: 0 0 * * * name: type: string description: The name of the profile example: profile1 description: type: string maxLength: 2000 description: The description of the profile example: Weekly scan of the production API for compliance proxyId: type: - string - 'null' format: uuid description: The proxy ID for the profile example: 00000000-0000-0000-0000-000000000000 schemaId: type: string format: uuid description: The ID of the asset schema for the profile example: 00000000-0000-0000-0000-000000000000 tagsIds: type: - array - 'null' items: type: string format: uuid description: The tags IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 extraAssetIds: type: - array - 'null' items: type: string format: uuid description: The extra asset IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 useAllAvailableExtraAssets: type: boolean description: Whether to use all available extra assets for the profile example: false mode: type: string enum: - read_only - read_write description: Scan aggressiveness. `read_only` runs non-destructive tests and avoids state-changing operations (preferred for production targets). `read_write` runs exhaustive tests including mutations (use on pre-production, staging, or dedicated test environments). If omitted, the API uses `mode` from the configuration JSON when present; otherwise the profile defaults to `read_only`. When both this field and a nested `mode` exist, this top-level value wins. example: read_only start: type: boolean default: true description: Whether to start the scan immediately required: - assetId - name responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /profiles/webapp: post: tags: - Profiles summary: Create a DAST WebApp profile operationId: createDastWebAppProfile description: Create a DAST WebApp profile. requestBody: description: Body of the request to create a DAST WebApp profile content: application/json: schema: type: object properties: assetId: type: string format: uuid description: The asset ID for the profile example: 00000000-0000-0000-0000-000000000000 configuration: type: string description: The scan configuration encoded as a JSON string (legacy public API contract). examples: - '{"authentication":{"users":[{"name":"public"}]}}' - '{"mode":"read_only"}' example: '{"authentication":{"users":[{"name":"public"}]}}' configurationObject: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The scan configuration as an object. Use this field for typed payloads; kept separate to preserve compatibility on `configuration`. example: authentication: users: - name: public cron: type: string description: The cron string example: 0 0 * * * name: type: string description: The name of the profile example: profile1 description: type: string maxLength: 2000 description: The description of the profile example: Weekly scan of the production API for compliance proxyId: type: - string - 'null' format: uuid description: The proxy ID for the profile example: 00000000-0000-0000-0000-000000000000 schemaId: type: string format: uuid description: The ID of the asset schema for the profile example: 00000000-0000-0000-0000-000000000000 tagsIds: type: - array - 'null' items: type: string format: uuid description: The tags IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 extraAssetIds: type: - array - 'null' items: type: string format: uuid description: The extra asset IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 useAllAvailableExtraAssets: type: boolean description: Whether to use all available extra assets for the profile example: false mode: type: string enum: - read_only - read_write description: Scan aggressiveness. `read_only` runs non-destructive tests and avoids state-changing operations (preferred for production targets). `read_write` runs exhaustive tests including mutations (use on pre-production, staging, or dedicated test environments). If omitted, the API uses `mode` from the configuration JSON when present; otherwise the profile defaults to `read_only`. When both this field and a nested `mode` exist, this top-level value wins. example: read_only start: type: boolean default: true description: Whether to start the scan immediately required: - assetId - name responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /profiles/ai-pentesting/rest: post: tags: - Profiles summary: Create an Automated Pentest REST profile operationId: createPentestRestProfile description: Create an Automated Pentest REST profile. requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: assetId: type: string format: uuid description: The asset ID for the profile example: 00000000-0000-0000-0000-000000000000 configuration: type: string description: The scan configuration encoded as a JSON string (legacy public API contract). examples: - '{"authentication":{"users":[{"name":"public"}]}}' - '{"mode":"read_only"}' example: '{"authentication":{"users":[{"name":"public"}]}}' configurationObject: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The scan configuration as an object. Use this field for typed payloads; kept separate to preserve compatibility on `configuration`. example: authentication: users: - name: public cron: type: string description: The cron string example: 0 0 * * * name: type: string description: The name of the profile example: profile1 description: type: string maxLength: 2000 description: The description of the profile example: Weekly scan of the production API for compliance proxyId: type: - string - 'null' format: uuid description: The proxy ID for the profile example: 00000000-0000-0000-0000-000000000000 schemaId: type: string format: uuid description: The ID of the asset schema for the profile example: 00000000-0000-0000-0000-000000000000 tagsIds: type: - array - 'null' items: type: string format: uuid description: The tags IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 extraAssetIds: type: - array - 'null' items: type: string format: uuid description: The extra asset IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 useAllAvailableExtraAssets: type: boolean description: Whether to use all available extra assets for the profile example: false mode: type: string enum: - read_only - read_write description: Scan aggressiveness. `read_only` runs non-destructive tests and avoids state-changing operations (preferred for production targets). `read_write` runs exhaustive tests including mutations (use on pre-production, staging, or dedicated test environments). If omitted, the API uses `mode` from the configuration JSON when present; otherwise the profile defaults to `read_only`. When both this field and a nested `mode` exist, this top-level value wins. example: read_only start: type: boolean default: true description: Whether to start the scan immediately required: - assetId - name responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /profiles/ai-pentesting/graphql: post: tags: - Profiles summary: Create an Automated Pentest GraphQL profile operationId: createPentestGraphqlProfile description: Create an Automated Pentest GraphQL profile. requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: assetId: type: string format: uuid description: The asset ID for the profile example: 00000000-0000-0000-0000-000000000000 configuration: type: string description: The scan configuration encoded as a JSON string (legacy public API contract). examples: - '{"authentication":{"users":[{"name":"public"}]}}' - '{"mode":"read_only"}' example: '{"authentication":{"users":[{"name":"public"}]}}' configurationObject: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The scan configuration as an object. Use this field for typed payloads; kept separate to preserve compatibility on `configuration`. example: authentication: users: - name: public cron: type: string description: The cron string example: 0 0 * * * name: type: string description: The name of the profile example: profile1 description: type: string maxLength: 2000 description: The description of the profile example: Weekly scan of the production API for compliance proxyId: type: - string - 'null' format: uuid description: The proxy ID for the profile example: 00000000-0000-0000-0000-000000000000 schemaId: type: string format: uuid description: The ID of the asset schema for the profile example: 00000000-0000-0000-0000-000000000000 tagsIds: type: - array - 'null' items: type: string format: uuid description: The tags IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 extraAssetIds: type: - array - 'null' items: type: string format: uuid description: The extra asset IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 useAllAvailableExtraAssets: type: boolean description: Whether to use all available extra assets for the profile example: false mode: type: string enum: - read_only - read_write description: Scan aggressiveness. `read_only` runs non-destructive tests and avoids state-changing operations (preferred for production targets). `read_write` runs exhaustive tests including mutations (use on pre-production, staging, or dedicated test environments). If omitted, the API uses `mode` from the configuration JSON when present; otherwise the profile defaults to `read_only`. When both this field and a nested `mode` exist, this top-level value wins. example: read_only start: type: boolean default: true description: Whether to start the scan immediately required: - assetId - name responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /profiles/ai-pentesting/webapp: post: tags: - Profiles summary: Create an Automated Pentest WebApp profile operationId: createPentestWebappProfile description: Create an Automated Pentest WebApp profile. requestBody: description: Body of the request to create an asset content: application/json: schema: type: object properties: assetId: type: string format: uuid description: The asset ID for the profile example: 00000000-0000-0000-0000-000000000000 configuration: type: string description: The scan configuration encoded as a JSON string (legacy public API contract). examples: - '{"authentication":{"users":[{"name":"public"}]}}' - '{"mode":"read_only"}' example: '{"authentication":{"users":[{"name":"public"}]}}' configurationObject: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' mode: type: - string - 'null' enum: - read_only - read_write - null automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The scan configuration as an object. Use this field for typed payloads; kept separate to preserve compatibility on `configuration`. example: authentication: users: - name: public cron: type: string description: The cron string example: 0 0 * * * name: type: string description: The name of the profile example: profile1 description: type: string maxLength: 2000 description: The description of the profile example: Weekly scan of the production API for compliance proxyId: type: - string - 'null' format: uuid description: The proxy ID for the profile example: 00000000-0000-0000-0000-000000000000 schemaId: type: string format: uuid description: The ID of the asset schema for the profile example: 00000000-0000-0000-0000-000000000000 tagsIds: type: - array - 'null' items: type: string format: uuid description: The tags IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 extraAssetIds: type: - array - 'null' items: type: string format: uuid description: The extra asset IDs for the profile example: - 00000000-0000-0000-0000-000000000000 - 00000000-0000-0000-0000-000000000001 useAllAvailableExtraAssets: type: boolean description: Whether to use all available extra assets for the profile example: false mode: type: string enum: - read_only - read_write description: Scan aggressiveness. `read_only` runs non-destructive tests and avoids state-changing operations (preferred for production targets). `read_write` runs exhaustive tests including mutations (use on pre-production, staging, or dedicated test environments). If omitted, the API uses `mode` from the configuration JSON when present; otherwise the profile defaults to `read_only`. When both this field and a nested `mode` exist, this top-level value wins. example: read_only start: type: boolean default: true description: Whether to start the scan immediately required: - assetId - name responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: The id of the profile name: type: string description: The name of the profile description: type: string description: The description of the profile scannerKind: type: string description: The scanner kind of the profile createdAt: type: string description: The date and time the profile was created updatedAt: type: string description: The date and time the profile was updated cron: type: - string - 'null' description: The cron of the profile scheduledForDeletionAt: type: - string - 'null' description: The date and time the profile is scheduled for deletion score: type: - number - 'null' description: The score of the profile coverage: type: - number - 'null' description: The coverage of the profile configuration: type: object properties: public_location_ids: type: - array - 'null' items: type: string private_location_ids: type: - array - 'null' items: type: string scope: type: - object - 'null' properties: use_defaults: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value exploration_scope: type: - array - 'null' items: type: string api_custom_rule_ids: type: - array - 'null' items: type: string frontend_custom_rule_ids: type: - array - 'null' items: type: string mode: type: - string - 'null' enum: - read_only - read_write - null authentication: type: - object - 'null' properties: $schema: type: string lifetime: type: - number - 'null' procedures: type: array items: type: object properties: name: type: string operations: type: array items: oneOf: - type: object properties: tech: type: string enum: - http parameters: type: object properties: proxy_override: type: - string - 'null' url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values queryParameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} timeout: type: number insecure: type: boolean follow_redirects: type: number required: - url - method - headers - cookies - queryParameters extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - oauth_authz_code_browser parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' authorization_url: type: string token_url: type: string redirect_uri: type: string client_id: type: string client_secret: type: string use_pkce: type: boolean login_timeout: type: number required: - login_url - authorization_url - token_url - redirect_uri - client_id - client_secret - use_pkce - login_timeout extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_agent parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - browser_actions parameters: type: object properties: proxy_override: type: - string - 'null' login_url: type: string auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - login_url extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_bpce parameters: type: object properties: proxy_override: type: - string - 'null' environment: type: string enum: - BP - CE required: - environment extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions - type: object properties: tech: type: string enum: - custom_msc parameters: type: object properties: proxy_override: type: - string - 'null' tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' required: - tenant_id - client_id - resource_app_id - certificate_pfx_base64 extractions: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name required: - tech - parameters - extractions injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable required: - name - operations - injections users: type: array items: type: object properties: name: type: string role: type: - string - 'null' credentials: type: object properties: username: type: string password: type: string headers: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: - array - 'null' items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: - array - 'null' items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: {} local_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string session_storage: type: - object - 'null' additionalProperties: type: object additionalProperties: type: string actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator digest: type: - string - 'null' basic: type: - string - 'null' procedure: type: string variables: type: - array - 'null' items: type: object properties: name: type: string value: type: string required: - name - value main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' user_instructions: type: - string - 'null' required: - name validation: type: boolean proxy: type: string presets: type: array items: oneOf: - type: object properties: type: type: string enum: - http users: type: array items: type: object properties: username: type: string headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string queryParameters: type: - object - 'null' additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string body: {} required: - username request: type: object properties: url: type: string method: type: string enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE headers: type: - object - 'null' additionalProperties: type: string cookies: type: - object - 'null' additionalProperties: type: string query_parameters: type: - object - 'null' additionalProperties: type: string body: {} required: - url - method extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - request - type: object properties: type: type: string enum: - oauth_ropc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password url: type: string client_id: type: string client_secret: type: string required: - type - users - url - client_id - client_secret - type: object properties: type: type: string enum: - oauth_client_credentials users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' client_id: type: string client_secret: type: string scopes: type: array items: type: string audience: type: string basic_style: type: - boolean - 'null' required: - username - client_id - client_secret url: type: string required: - type - users - url - type: object properties: type: type: string enum: - oauth_authz_code_browser users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - password authorization_url: type: string token_url: type: string client_id: type: string client_secret: type: string redirect_uri: type: string scopes: type: array items: type: string use_pkce: type: boolean login_timeout: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' required: - type - users - authorization_url - token_url - client_id - client_secret - redirect_uri - use_pkce - type: object properties: type: type: string enum: - basic users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - graphql users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username - variables url: type: string query: type: string extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - url - query - type: object properties: type: type: string enum: - digest users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string required: - username - password required: - type - users - type: object properties: type: type: string enum: - cognito_userpass users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string scopes: type: array items: type: string required: - username - password region: type: string enum: - us-east-2 - us-east-1 - us-west-1 - us-west-2 - af-south-1 - ap-east-1 - ap-south-1 - ap-northeast-3 - ap-northeast-2 - ap-southeast-1 - ap-southeast-2 - ap-northeast-1 - ca-central-1 - cn-north-1 - cn-northwest-1 - eu-central-1 - eu-west-1 - eu-west-2 - eu-south-1 - eu-west-3 - eu-north-1 - me-south-1 - sa-east-1 client_id: type: string client_secret: type: string required: - type - users - region - client_id - client_secret - type: object properties: type: type: string enum: - headers users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username - headers required: - type - users - type: object properties: type: type: string enum: - curl users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' curl: type: string required: - username - curl extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - extractions - injections - type: object properties: type: type: string enum: - curl_sequence users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' variables: type: object additionalProperties: type: string required: - username requests: type: array items: type: object properties: curl: type: string extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name required: - curl injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - requests - type: object properties: type: type: string enum: - browser_agent users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string additional_fields: type: - array - 'null' items: type: object properties: locator: type: string value: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' required: - locator - value pre_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator post_login_actions: type: - array - 'null' items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator instructions: type: - string - 'null' required: - username - password login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' agentic: type: - object - 'null' properties: enabled: type: boolean instructions: type: - string - 'null' required: - enabled required: - type - users - login_url - type: object properties: type: type: string enum: - browser_actions users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' actions: type: array items: oneOf: - type: object properties: action: type: string enum: - click allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - fill allow_failure: type: - boolean - 'null' locator: type: string one_by_one: type: - boolean - 'null' value: type: string auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - fill_totp allow_failure: type: - boolean - 'null' locator: type: string secret: type: string auto_submit: type: - boolean - 'null' required: - action - locator - secret - type: object properties: action: type: string enum: - goto allow_failure: type: - boolean - 'null' new_page: type: - boolean - 'null' url: type: string timeout: type: - number - 'null' required: - action - url - type: object properties: action: type: string enum: - check allow_failure: type: - boolean - 'null' locator: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - type: object properties: action: type: string enum: - select allow_failure: type: - boolean - 'null' locator: type: string value: type: string timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - locator - value - type: object properties: action: type: string enum: - wait_element allow_failure: type: - boolean - 'null' locator: type: string timeout: type: number required: - action - locator - timeout - type: object properties: action: type: string enum: - wait_text allow_failure: type: - boolean - 'null' value: type: string timeout: type: number required: - action - value - timeout - type: object properties: action: type: string enum: - focus_page allow_failure: type: - boolean - 'null' url_pattern: type: string required: - action - url_pattern - type: object properties: action: type: string enum: - sleep allow_failure: type: - boolean - 'null' seconds: type: number required: - action - seconds - type: object properties: action: type: string enum: - fill_mail_totp - fill_email_totp allow_failure: type: - boolean - 'null' email_address: type: string locator: type: string one_by_one: type: - boolean - 'null' auto_submit: type: - boolean - 'null' timeout: type: - number - 'null' select_first_if_multiple: type: - boolean - 'null' required: - action - email_address - locator - type: object properties: action: type: string enum: - click_mail_magic_link allow_failure: type: - boolean - 'null' email_address: type: string new_page: type: - boolean - 'null' timeout: type: - number - 'null' required: - action - email_address - type: object properties: action: type: string enum: - solve_captcha allow_failure: type: - boolean - 'null' locator: type: string auto_submit: type: - boolean - 'null' required: - action - locator required: - username - actions login_url: type: string stealth_mode: type: - boolean - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' instructions: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string name: type: string regex: type: - string - 'null' jq: type: - string - 'null' required: - location - origin - key - name injections: anyOf: - type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable - type: array items: type: object properties: location: type: string enum: - page - browser_local_storage - browser_session_storage - browser_cookies origin: type: string key: type: string variable: type: string required: - location - origin - key - variable - type: 'null' auto_extraction_urls: type: - array - 'null' items: type: string logged_in_detector_text: type: - string - 'null' logged_in_detector_timeout: type: - number - 'null' required: - type - users - login_url - type: object properties: type: type: string enum: - custom_bpce users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' password: type: string otp: type: string required: - username - password - otp environment: type: string enum: - BP - CE extractions: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: array items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - environment - type: object properties: type: type: string enum: - custom_msc users: type: array items: type: object properties: username: type: string headers: type: object additionalProperties: type: string cookies: type: object additionalProperties: type: string query_parameters: type: object additionalProperties: type: string main_user: type: - boolean - 'null' allow_failure: type: - boolean - 'null' basic: type: - string - 'null' digest: type: - string - 'null' role: type: - string - 'null' required: - username tenant_id: type: string client_id: type: string resource_app_id: type: string certificate_pfx_base64: type: string certificate_password: type: - string - 'null' scope: type: - string - 'null' token_url: type: - string - 'null' extractions: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string regex: type: string name: type: string required: - location - key - name injections: type: - array - 'null' items: type: object properties: location: type: string enum: - header - cookie - body - query key: type: string prefix: type: string variable: type: string required: - location - key - variable required: - type - users - tenant_id - client_id - resource_app_id - certificate_pfx_base64 multi_user_is_fallback: type: - boolean - 'null' security_tests: type: - object - 'null' properties: high_number_of_custom_scalars: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pci: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_pii: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_phi: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' high_number_of_secrets: type: - object - 'null' properties: skip: type: - boolean - 'null' detection_threshold: type: - number - 'null' adminer_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' xss_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' sql_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' replay_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' command_injection_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' access_control_agent: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' airflow_v3_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' alibaba_canal_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' angular_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' ansible_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_apollo_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_druid_log4j: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_flink_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_hertzbeat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_nifi_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_ofbiz_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_file_read: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_log4j_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apache_solr_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' apisix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' appspec_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' appveyor_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_encryption: type: - object - 'null' properties: skip: type: - boolean - 'null' asp_net_view_state_mac_validation_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' arcade_php_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_access_token: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' aws_docker_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' awstats_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' bsphp_info: type: - object - 'null' properties: skip: type: - boolean - 'null' bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string character_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_bola: type: - object - 'null' properties: skip: type: - boolean - 'null' do_not_fuzz: type: - array - 'null' items: type: string cloudstack_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' codimd_unauth_file_upload: type: - object - 'null' properties: skip: type: - boolean - 'null' command: type: - object - 'null' properties: skip: type: - boolean - 'null' config_json_exposure_fuzz: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' console_error: type: - object - 'null' properties: skip: type: - boolean - 'null' cors: type: - object - 'null' properties: skip: type: - boolean - 'null' crashing_page: type: - object - 'null' properties: skip: type: - boolean - 'null' dbgate_unauth_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_crlf: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2021_44228: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_25723: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_32651: type: - object - 'null' properties: skip: type: - boolean - 'null' cve_2024_40711: type: - object - 'null' properties: skip: type: - boolean - 'null' csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_get_based: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_csrf_post_based: type: - object - 'null' properties: skip: type: - boolean - 'null' debug_mode: type: - object - 'null' properties: skip: type: - boolean - 'null' django_secret_key: type: - object - 'null' properties: skip: type: - boolean - 'null' dolphinscheduler_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' doris_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' directory_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' dkim: type: - object - 'null' properties: skip: type: - boolean - 'null' dmarc: type: - object - 'null' properties: skip: type: - boolean - 'null' loopback: type: - object - 'null' properties: skip: type: - boolean - 'null' permisive_spf: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_length: type: - object - 'null' properties: skip: type: - boolean - 'null' dnsrecord_txt_sensitive: type: - object - 'null' properties: skip: type: - boolean - 'null' dnssec_disabled: type: - object - 'null' properties: skip: type: - boolean - 'null' stored_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal7_elfinder_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' drupal_avatar_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' dubbo_admin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' easyimage_downphp_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' ecology_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' elasticsearch_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' esafenet_mysql_fileread: type: - object - 'null' properties: skip: type: - boolean - 'null' excessive_browser_permissions: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_config_file: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_insecure_websocket: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_sql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' frontend_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_xss_via_domain_takeover: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_mysql_config: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_settings_php: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_sourcemap: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' exposed_sql_dumps: type: - object - 'null' properties: skip: type: - boolean - 'null' file_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_alias_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_batch_limit: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_circular_introspection: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_directive_overload: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_duplication: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_field_suggestion: type: - object - 'null' properties: skip: type: - boolean - 'null' graphql_recursive_fragment: type: - object - 'null' properties: skip: type: - boolean - 'null' guessable_cookie_value: type: - object - 'null' properties: skip: type: - boolean - 'null' header_cache_control: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_security_policy: type: - object - 'null' properties: skip: type: - boolean - 'null' header_content_type: type: - object - 'null' properties: skip: type: - boolean - 'null' header_set_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' header_strict_transport_security: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_content_type_options: type: - object - 'null' properties: skip: type: - boolean - 'null' header_x_frame_options: type: - object - 'null' properties: skip: type: - boolean - 'null' html_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' http2_not_supported: type: - object - 'null' properties: skip: type: - boolean - 'null' http_no_https_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' http_param_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' ide_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_client_side_proto_pollution: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_frontend_template_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_query_params: type: - object - 'null' properties: skip: type: - boolean - 'null' improper_input_xss_reflection: type: - object - 'null' properties: skip: type: - boolean - 'null' introspection_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_confusion: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_alg_none: type: - object - 'null' properties: skip: type: - boolean - 'null' exposed_jwt: type: - object - 'null' properties: skip: type: - boolean - 'null' jwt_sign_check: type: - object - 'null' properties: skip: type: - boolean - 'null' leaking_authentication: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_prompt_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_system_prompt_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_insecure_output_handling: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_command_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' llm_tool_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' mass_assignment: type: - object - 'null' properties: skip: type: - boolean - 'null' mcp_unauth: type: - object - 'null' properties: skip: type: - boolean - 'null' nosql: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_nosql_injection: type: - object - 'null' properties: skip: type: - boolean - 'null' pagination_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_open_redirect: type: - object - 'null' properties: skip: type: - boolean - 'null' password_field_autocompletion: type: - object - 'null' properties: skip: type: - boolean - 'null' positive_integer_validation: type: - object - 'null' properties: skip: type: - boolean - 'null' private_data: type: - object - 'null' properties: skip: type: - boolean - 'null' users: type: - object - 'null' additionalProperties: type: array items: type: string private_ip: type: - object - 'null' properties: skip: type: - boolean - 'null' reflected_url_parameter: type: - object - 'null' properties: skip: type: - boolean - 'null' request_url_override: type: - object - 'null' properties: skip: type: - boolean - 'null' response_size: type: - object - 'null' properties: skip: type: - boolean - 'null' max_length: type: - number - 'null' sensitive_comments: type: - object - 'null' properties: skip: type: - boolean - 'null' server_error: type: - object - 'null' properties: skip: type: - boolean - 'null' software_component_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_dump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_env: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_heapdump: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_logfile: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_mappings: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_restart: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_shutdown: type: - object - 'null' properties: skip: type: - boolean - 'null' springboot_actuator_trace: type: - object - 'null' properties: skip: type: - boolean - 'null' sql: type: - object - 'null' properties: skip: type: - boolean - 'null' dedupe_query_params_by_name: type: - boolean - 'null' sql_injection_oracle_based: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl_certificate: type: - object - 'null' properties: skip: type: - boolean - 'null' ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' frontend_ssrf_header: type: - object - 'null' properties: skip: type: - boolean - 'null' stacktrace: type: - object - 'null' properties: skip: type: - boolean - 'null' subresource_integrity_missing: type: - object - 'null' properties: skip: type: - boolean - 'null' multi_user_access_control: type: - object - 'null' properties: skip: type: - boolean - 'null' main_user: type: - string - 'null' natural_language_rule: type: - string - 'null' other_users: type: - object - 'null' properties: detect: type: array items: {} required: - detect specific_users: type: - object - 'null' additionalProperties: type: object properties: detect: type: array items: {} required: - detect paths: type: - array - 'null' items: type: string keys_matching: type: - array - 'null' items: type: string timeout: type: - object - 'null' properties: skip: type: - boolean - 'null' unreachable_server: type: - object - 'null' properties: skip: type: - boolean - 'null' unsafe_function_use: type: - object - 'null' properties: skip: type: - boolean - 'null' vue_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' waf_bypass: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_oembed_endpoint_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rdf_feed_user_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_rest_api_users_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_affiliatewp_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_backup_listing: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_db_repair: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_debug_log: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_social_metrics_tracker: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_ssrf_oembed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_total_upkeep_backup_download: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_waf_bypass_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wordfence_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_wp_cron_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_xmlrpc_php_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_zebra_form_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_insert_php_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' wp_phpfreechat_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' flask_session_cookie: type: - object - 'null' properties: skip: type: - boolean - 'null' geovision_geowebserver_lfi_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' git_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' svelte_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' gitlab_weak_login: type: - object - 'null' properties: skip: type: - boolean - 'null' glpi_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' grafana_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' infoblox_netmri_rails_cookie_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' iotawatt_app_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' jenkins_weak_password: type: - object - 'null' properties: skip: type: - boolean - 'null' jolokia_tomcat_creds_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_booking_component: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_com_fabrik_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_department_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_easyshop_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_iproperty_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jlex_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jmarket_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_joombri_careers_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvehicles_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_jvtwitter_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_marvikshop_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' joomla_solidres_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' js_data_leak: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' js_exposed_api: type: - object - 'null' properties: skip: type: - boolean - 'null' issues_count_limit: type: - number - 'null' jupyter_notebook_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' kafka_center_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' karaf_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' kkfileview_ssrf: type: - object - 'null' properties: skip: type: - boolean - 'null' kylin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' lucee_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' malwared_byob_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' mdb_database_file: type: - object - 'null' properties: skip: type: - boolean - 'null' minio_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mssql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' mysql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_merge_slashes_path_traversal: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_module_vts_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_proxy_manager_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' nginx_webui_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' nginxwebui_runcmd_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' node_ecstatic_internal_path: type: - object - 'null' properties: skip: type: - boolean - 'null' nodered_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' openmediavault_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' opensearch_dashboard_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' php_timeclock_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' php_xdebug_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' php_zerodium_backdoor_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' phpldapadmin_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' phpmyadmin_unauth_access: type: - object - 'null' properties: skip: type: - boolean - 'null' phpok_sqli: type: - object - 'null' properties: skip: type: - boolean - 'null' phpwiki_lfi: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' potential_cve: type: - object - 'null' properties: skip: type: - boolean - 'null' psql_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' private_key_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' rabbitmq_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rails6_xss: type: - object - 'null' properties: skip: type: - boolean - 'null' ranger_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_1: type: - object - 'null' properties: skip: type: - boolean - 'null' react2shell_2: type: - object - 'null' properties: skip: type: - boolean - 'null' react_development_build: type: - object - 'null' properties: skip: type: - boolean - 'null' rundeck_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' rusty_joomla: type: - object - 'null' properties: skip: type: - boolean - 'null' sangfor_cphp_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' secret_token_rb: type: - object - 'null' properties: skip: type: - boolean - 'null' seeyon_createmysql_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' selenium_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' self_signed_ssl: type: - object - 'null' properties: skip: type: - boolean - 'null' sonarqube_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_default_credentials: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_exposed: type: - object - 'null' properties: skip: type: - boolean - 'null' ssh_password_auth_enabled: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp6_arbitrary_write: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_2_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_501_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_5023_rce: type: - object - 'null' properties: skip: type: - boolean - 'null' thinkphp_509_information_disclosure: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' tomcat_examples_login: type: - object - 'null' properties: skip: type: - boolean - 'null' totolink_n150rt_password_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' twig_php_ssti: type: - object - 'null' properties: skip: type: - boolean - 'null' twonky_server_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' weaver_mysql_config_exposure: type: - object - 'null' properties: skip: type: - boolean - 'null' webmin_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' wordpress_accessible_wpconfig: type: - object - 'null' properties: skip: type: - boolean - 'null' compromised_supply_chain: type: - object - 'null' properties: skip: type: - boolean - 'null' zabbix_default_login: type: - object - 'null' properties: skip: type: - boolean - 'null' dns_rebinding_attack: type: - object - 'null' properties: skip: type: - boolean - 'null' spoofable_spf_records_ptr_mechanism: type: - object - 'null' properties: skip: type: - boolean - 'null' xxe: type: - object - 'null' properties: skip: type: - boolean - 'null' inference: type: - object - 'null' properties: scalars: type: - object - 'null' additionalProperties: type: object properties: names: type: - array - 'null' items: type: string ignored_names: type: - array - 'null' items: type: string description: type: - string - 'null' pattern: type: - string - 'null' ignored_pattern: type: - string - 'null' examples: type: - array - 'null' items: type: string parents: type: - array - 'null' items: type: string enum: - String - Int - Float - Boolean sensitivity: type: - string - 'null' enum: - NONE - LOW - MEDIUM - HIGH - null strategy: type: - string - 'null' enum: - key - key_strict - value - value_strict - key_or_value - key_or_value_strict - key_strict_or_value - key_and_value_strict - null raise_on_commit: type: - boolean - 'null' raise_on_exposure: type: - boolean - 'null' is_sourceable: type: - boolean - 'null' null_is_unauthenticated: type: - boolean - 'null' network: type: - object - 'null' properties: request_timeout_s: type: - number - 'null' requests_per_second: type: - number - 'null' custom_headers: type: - object - 'null' additionalProperties: type: array items: type: string subdomain_enumeration: type: - object - 'null' properties: blocklist: type: - array - 'null' items: anyOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: string port_scanning: type: - object - 'null' properties: ports: type: - array - 'null' items: type: number service_discovery: type: - object - 'null' properties: blocklist: type: - array - 'null' items: type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value base_urls_delimiters: type: - array - 'null' items: type: string base_urls_wordlist: type: - array - 'null' items: type: string endpoints_wordlist: type: - array - 'null' items: type: string graphql_endpoints_wordlist: type: - array - 'null' items: type: string frontend_dast: type: - object - 'null' properties: location_id: type: - string - 'null' max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string security_checks_enabled: type: - array - 'null' items: type: string enum: - ALL - NONE - API_CHECKS - ACTIVE_PAGE_CHECKS - PASSIVE_PAGE_CHECKS - NETWORK_CHECKS api_checks_during_auth: type: - boolean - 'null' single_page_worker: type: - boolean - 'null' parallel_workers: type: - number - 'null' relax_cors_security: type: - boolean - 'null' user_agent: type: - string - 'null' escape_user_header: type: - boolean - 'null' prefetch_sitemap: type: - boolean - 'null' crawling_tuning: type: - object - 'null' properties: max_unique_values_per_query_param: type: - number - 'null' max_unique_fragments_per_page: type: - number - 'null' max_parameterized_url_variations: type: - number - 'null' only_inscope_crawling_logs: type: - boolean - 'null' static_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' time_limit_seconds: type: - number - 'null' logout_detection: type: - object - 'null' properties: enabled: type: - boolean - 'null' logged_in_indicator_regex_patterns: type: - array - 'null' items: type: string logout_redirection_url_patterns: type: - array - 'null' items: type: string session_cookie_regex_patterns: type: - array - 'null' items: type: string auto_reauthenticate: type: - boolean - 'null' agentic_detection_enabled: type: - boolean - 'null' scope: type: - object - 'null' properties: api_testing: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value crawling: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' agentic_crawling: type: - object - 'null' properties: enabled: type: - boolean - 'null' spa_crawling: type: - boolean - 'null' instructions: type: - string - 'null' graphql_api_dast: type: - object - 'null' properties: url: type: - string - 'null' location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' max_generated_depth: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value in_scope_only: type: - boolean - 'null' rest_api_dast: type: - object - 'null' properties: location_id: type: - string - 'null' profile: type: - string - 'null' enum: - surface - cicd - default - deep - unrestricted - null exploration_depth: type: - string - 'null' enum: - light - balanced - deep - null explore_with_all_users: type: - boolean - 'null' cross_user_memory_enabled: type: - boolean - 'null' cross_user_memory_allowlist: type: - array - 'null' items: type: string max_duration: type: - number - 'null' hotstart: type: - array - 'null' items: type: string hotstart_only: type: - boolean - 'null' scope: type: - object - 'null' properties: extend_global_scope: type: - boolean - 'null' allowlist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value blocklist: type: - array - 'null' items: oneOf: - type: object properties: type: type: string enum: - domain value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - ip value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - rest_api_path value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null domain: type: - string - 'null' required: - type - value - type: object properties: type: type: string enum: - rest_api_url value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null method: type: - string - 'null' enum: - CONNECT - DELETE - GET - HEAD - OPTIONS - PATCH - POST - PUT - TRACE - null required: - type - value - type: object properties: type: type: string enum: - graphql_operation value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value - type: object properties: type: type: string enum: - web_page_element_selector value: type: string operation: type: - string - 'null' enum: - equals - starts_with - ends_with - contains - regex - wildcard - null required: - type - value query_params_are_required: type: - boolean - 'null' in_scope_only: type: - boolean - 'null' automated_pentesting: type: - object - 'null' properties: xss_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' business_logic_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' business_context: type: - string - 'null' test_mode: type: - string - 'null' enum: - privilege_escalation - tenant_isolation - null sqli_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' idor_agent: type: - object - 'null' properties: enabled: type: - boolean - 'null' natural_language: type: - string - 'null' multi_agent_pentest: type: - object - 'null' properties: enabled: type: - boolean - 'null' max_duration: type: - number - 'null' instructions: type: - string - 'null' experimental: type: - object - 'null' properties: blst_exploration_only: type: - boolean - 'null' agentic_idor: type: - boolean - 'null' regression_testing_file_upload_ids: type: - array - 'null' items: type: string asm_technologies: type: - boolean - 'null' asm_code_projects: type: - boolean - 'null' asm_enumerate_code_projects: type: - boolean - 'null' external_crawling_task: type: - boolean - 'null' xss_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null sqli_agent_model_alias: type: - string - 'null' enum: - optimus - maxus - caesar - augustus - tiberius - hadrian - aurelian - trajanus - marcus - severus - draco - phoenix - orion - atlas - titan - vega - helios - nova - solis - null asm_cve_agent: type: - boolean - 'null' js_analysis: type: - boolean - 'null' extended_port_scan: type: - boolean - 'null' dast_multi_agent_pentest: type: - boolean - 'null' feature_flags: type: - array - 'null' items: type: string description: The active configuration of the profile schemaAssetId: type: - string - 'null' format: uuid description: Schema asset id derived from the first `extraAssets` entry with class SCHEMA, a request hint when the link is not yet visible in `extraAssets` (e.g. immediately after a mutation), or the legacy `assetSchemaId` while migration/backfill is incomplete. extraAssets: type: array items: type: object properties: id: type: string format: uuid description: The id of the asset name: type: string description: The name of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY description: The class of the asset type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON description: The type of the asset status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset createdAt: type: string description: The date and time the asset was created isActive: type: boolean description: True when this asset's id equals the profile's resolved `schemaAssetId`. Callers can filter `class === 'SCHEMA' && isActive` to find the schema currently driving scans. signedUrl: type: - string - 'null' description: Time-limited HTTPS URL to download the backing schema bytes. Non-null only for `class === "SCHEMA"` entries; null for other asset classes. required: - id - name - class - type - status - createdAt - isActive - signedUrl title: ProfileExtraAsset description: Extra asset associated with a profile description: The extra assets of the profile asset: type: object properties: id: type: string format: uuid description: The id of the asset class: type: string enum: - API_SERVICE - CDN - CLOUD_COMPONENT - CLOUD_HOSTING - CODE_PROJECT - CSPM - DEV_TOOLS - FRONTEND - HOST - NETWORK - REPOSITORY - SCHEMA - SOURCE_CODE_MANAGEMENT - TECHNOLOGY type: type: string enum: - AKAMAI_ACCOUNT - AWS_ACCOUNT - AWS_LAMBDA - AZURE_TENANT - BITBUCKET_ORGANIZATION - BITBUCKET_REPOSITORY - BURPSUITE_EXPORT - CLOUDFLARE_ACCOUNT - CODE_PROJECT - DNS - GCP_PROJECT - GITHUB_ORGANIZATION - GITHUB_REPOSITORY - GITLAB_GROUP - GITLAB_REPOSITORY - GRAPHQL - GRAPHQL_SCHEMA - GRPC - HAR_EXPORT - INSOMNIA - IPV4 - IPV4_RANGE - IPV6 - KUBERNETES_CLUSTER - MCP - OPENAPI - PACKAGE - POSTMAN_COLLECTION - POSTMAN_ENVIRONMENT - POSTMAN_ORGANIZATION - REST - SOAP - SOFTWARE - WEBAPP - WEBSOCKET - WIZ_ACCOUNT - WP_JSON name: type: string description: The name of the asset externalUrl: type: - string - 'null' description: The external url of the asset faviconUrl: type: - string - 'null' description: The favicon url of the asset description: type: - string - 'null' description: The description of the asset createdAt: type: string description: The date and time the asset was created lastSeenAt: type: string description: The date and time the asset was last seen scheduledForDeletionAt: type: - string - 'null' description: The date and time the asset is scheduled for deletion status: type: string enum: - DEPRECATED - FALSE_POSITIVE - MONITORED - OUT_OF_SCOPE - THIRD_PARTY description: The status of the asset owners: type: array items: type: string description: The owners of the asset tags: type: array items: type: object properties: id: type: string format: uuid description: The id of the tag name: type: string description: The name of the tag color: type: string description: The color of the tag required: - id - name - color title: Tag description: Information about a tag description: The tags of the asset risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the asset firstSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The first seen scan of the asset lastSeenScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan commitHash: type: - string - 'null' description: The commit hash of the scan commitBranch: type: - string - 'null' description: The commit branch of the scan links: type: object properties: scanIssues: type: string description: The url to view the scan issues in the platform required: - scanIssues description: The links of the scan required: - id - status - createdAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - commitHash - commitBranch - links title: ScanSummarized description: The last seen scan of the asset service: type: - object - 'null' properties: type: type: string enum: - GRAPHQL - GRPC - MCP - REST - SOAP - WEBSOCKET url: type: string framework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null tls: type: boolean ips: type: array items: type: string required: - type - url - framework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - tls - ips title: AssetServiceDetailed description: The service of the asset frontend: type: - object - 'null' properties: type: type: string enum: - WEBAPP url: type: string framework: type: - string - 'null' APIFramework: type: - string - 'null' authProtocol: type: - string - 'null' authTechnology: type: - string - 'null' enum: - AUTH0 - AWS_IAM - AZURE_ACTIVE_DIRECTORY - COGNITO - KEYCLOAK - UNKNOWN - null cloudProvider: type: - string - 'null' enum: - AKAMAI - ALIBABA - AWS - AZURE - CLOUDFLARE - DIGITALOCEAN - FASTLY - GCP - GRAVITEE - HEROKU - IBM - LINODE - ORACLE - OVH - SCALEWAY - TENCENT - UCLOUD - UNKNOWN - VERCEL - null wafProvider: type: - string - 'null' enum: - ACE_XML_GATEWAY - AESECURE - AIREECDN - AIRLOCK - ALERT_LOGIC - ALIYUNDUN - ANQUANBAO - ANYU - APPROACH - APPWALL - ARMOR_DEFENSE - ARVANCLOUD - ASPA_FIREWALL - ASP_NET_GENERIC - ASP_NET_WAF - ASTRA - AWS_ELASTIC_LOAD_BALANCER - AZIONCDN - AZURE_FRONT_DOOR - BARIKODE - BARRACUDA - BEKCHY - BELUGA_CDN - BINARYSEC - BITNINJA - BLOCKDOS - BLUEDON - BULLETPROOF_SECURITY_PRO - CACHEFLY_CDN - CACHEWALL - CDNNS_APPLICATION_GATEWAY - CHINACACHE_LOAD_BALANCER - CHUANG_YU_SHIELD - CLOUDBRIC - CLOUDFLARE - CLOUDFLOOR - CLOUDFRONT - COMODO_CWATCH - CRAWLPROTECT - DATADOME - DATAPOWER - DENYALL - DISTIL - DOSARREST - DOTDEFENDER - DYNAMICWEB_INJECTION_CHECK - EDGECAST - EEYE_SECUREIIS - EISOO_CLOUD_FIREWALL - EXPRESSION_ENGINE - F5_NETWORKS - FASTLY - FIREPASS - FORTIWEB - GODADDY_WEBSITE_PROTECTION - GOOGLE_CLOUD_APP_ARMOR - GREYWIZARD - HUAWEI_CLOUD_FIREWALL - HYPERGUARD - IMUNIFY360 - INCAPSULA - INDUSGUARD - INSTART_DX - ISA_SERVER - JANUSEC_APPLICATION_GATEWAY - JIASULE - KEYCDN - KONA_SITEDEFENDER - KS_WAF - LIMELIGHT_CDN - LITESPEED - MALCARE - MAXCDN - MISSION_CONTROL_SHIELD - MODSECURITY - NAXSI - NEMESIDA - NETCONTINUUM - NETSCALER_APPFIREWALL - NEVISPROXY - NEWDEFEND - NEXUSGUARD_FIREWALL - NINJAFIREWALL - NSFOCUS - NULLDDOS_PROTECTION - ONMESSAGE_SHIELD - OPEN_RESTY_LUA_NGINX - ORACLE_CLOUD - PALO_ALTO_NEXT_GEN_FIREWALL - PENTAWAF - PERIMETERX - PKSECURITY_IDS - POWERCDN - PROFENSE - PT_APPLICATION_FIREWALL - PUHUI - QCLOUD - QINIU - RAYWAF - REBLAZE - RSFIREWALL - SABRE_FIREWALL - SAFE3_WEB_FIREWALL - SAFEDOG - SAFELINE - SECKING - SECUPRESS_WP_SECURITY - SECURESPHERE - SECURE_ENTRY - SENGINX - SERVERDEFENDER_VP - SHADOW_DAEMON - SHIELD_SECURITY - SITEGROUND - SITEGUARD - SITELOCK - SONICWALL - SQUARESPACE - SQUIDPROXY_IDS - STACKPATH - SUCURI_CLOUDPROXY - TENCENT_CLOUD_FIREWALL - TEROS - TRAFFICSHIELD - TRANSIP_WEB_FIREWALL - UEWAF - UNKNOWN - URLMASTER_SECURITYCHECK - URLSCAN - UTM_WEB_PROTECTION - VARNISH - VIETTEL - VIRUSDIE - WALLARM - WATCHGUARD - WEBARX - WEBKNIGHT - WEBLAND - WEBSEAL - WEBTOTEM - WEST263_CDN - WORDFENCE - WPMUDEV_WAF - WP_CERBER_SECURITY - WTS_WAF - XLABS_SECURITY_WAF - XUANWUDUN - YUNDUN - YUNJIASU - YUNSUO - YXLINK - ZENEDGE - ZSCALER - null environment: type: - string - 'null' enum: - DEVELOPMENT - PRODUCTION - STAGING - UNKNOWN - null ips: type: array items: type: string tls: type: boolean required: - type - url - framework - APIFramework - authProtocol - authTechnology - cloudProvider - wafProvider - environment - ips - tls title: AssetFrontendDetailed description: The frontend of the asset host: type: - object - 'null' properties: type: type: string enum: - DNS - IPV4 - IPV6 address: type: string ips: type: array items: type: string ports: type: array items: type: object properties: port: type: number required: - port records: type: array items: type: object properties: type: type: string value: type: string required: - type - value required: - type - address - ips - ports - records title: AssetHostDetailed description: The host of the asset schemaUrl: type: - string - 'null' description: Time-limited HTTPS URL for schema-class assets; null for other asset classes links: type: object properties: assetOverview: type: string description: The url to view the asset overview in the platform required: - assetOverview description: The links of the asset required: - id - class - type - name - externalUrl - faviconUrl - description - createdAt - lastSeenAt - scheduledForDeletionAt - status - tags - risks - firstSeenScan - lastSeenScan - service - frontend - host - schemaUrl - links title: AssetDetailed description: The asset of the profile lastScanId: type: - string - 'null' format: uuid description: The ID of the last scan of the profile lastSuccessfulScanId: type: - string - 'null' format: uuid description: The ID of the last successful scan of the profile lastScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent scan for this profile lastSuccessfulScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: The most recent successful scan for this profile lastResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastScan`. Prefer `lastScan`.' deprecated: true lastSuccessfulResourceScan: type: - object - 'null' properties: id: type: string format: uuid description: The id of the scan status: type: string description: The status of the scan createdAt: type: string description: The date and time the scan was created updatedAt: type: string description: The date and time the scan was updated finishedAt: type: - string - 'null' description: The date and time the scan was finished score: type: - number - 'null' description: The score of the scan coverage: type: - number - 'null' description: Aggregate API coverage ratio for this scan (0–1), when the scan has finished with coverage data duration: type: number description: The duration of the scan progressRatio: type: number description: The progress ratio of the scan initiator: type: string description: The initiator of the scan kind: type: string description: The kind of the scan profileId: type: string description: The id of the profile of the scan organizationId: type: string description: The id of the organization of the scan commitHash: type: - string - 'null' commitBranch: type: - string - 'null' commitAuthor: type: - string - 'null' commitLink: type: - string - 'null' commitAuthorProfilePictureLink: type: - string - 'null' links: type: object properties: scanIssues: type: string description: URL to view the scan issues in the platform required: - scanIssues required: - id - status - createdAt - updatedAt - finishedAt - score - coverage - duration - progressRatio - initiator - kind - profileId - organizationId - commitHash - commitBranch - commitAuthor - commitLink - commitAuthorProfilePictureLink - links title: ScanDetailed description: 'Deprecated: identical to `lastSuccessfulScan`. Prefer `lastSuccessfulScan`.' deprecated: true risks: type: array items: type: string enum: - CRITICAL_FINDING - EXPOSED - OPEN_SCHEMA - PRIVATE - PROD_ONLY_MODE - SENSITIVE_DATA - UNAUTHENTICATED description: The risks of the profile statistics: type: object properties: issues: type: object properties: all: type: number description: The number of all issues severities: type: array items: type: object properties: severity: type: string description: The severity of the issue count: type: number description: The count of the issue required: - severity - count categories: type: array items: type: object properties: category: type: string description: The category of the issue count: type: number description: The count of the issue required: - category - count required: - all - severities - categories description: The issues of the statistics required: - issues title: StatisticsDetailed description: The statistics of the profile links: type: object properties: profileSummary: type: string description: The url to view the profile summary in the platform required: - profileSummary description: The links of the profile required: - id - name - description - scannerKind - createdAt - updatedAt - cron - scheduledForDeletionAt - score - coverage - configuration - schemaAssetId - extraAssets - asset - lastScanId - lastSuccessfulScanId - lastScan - lastSuccessfulScan - lastResourceScan - lastSuccessfulResourceScan - risks - statistics - links '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /authentications: post: tags: - Profiles summary: Start an authentication configuration check operationId: startAuthentication description: Validates authentication credentials without running a full scan. Provide `authentication` directly, or pass a `profileId` to reuse its saved authentication (optionally overriding it). Poll `GET /authentications/{id}` until `status` is FINISHED, FAILED, or CANCELED. requestBody: content: application/json: schema: type: object properties: profileId: type: string format: uuid description: Profile whose saved configuration is used as the baseline. When omitted, `authentication` must be provided. authentication: type: object additionalProperties: {} description: Authentication object to validate. When `profileId` is also set, this replaces the profile saved authentication. proxyId: type: - string - 'null' format: uuid description: Force a specific Escape or private location (proxy) for this check defaultProxyType: type: string enum: - ESCAPE - PRIVATE description: When `proxyId` is omitted, restrict to Escape-managed locations or private locations responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: Identifier for this check; use it when polling for status status: type: string enum: - CANCELED - FAILED - FINISHED - RUNNING - STARTING description: Initial lifecycle state (typically STARTING right after creation) required: - id - status '400': description: Bad Request content: application/json: schema: type: object properties: message: type: string enum: - Bad Request details: type: string required: - message - details title: BadRequest description: Returned when the request payload fails validation /authentications/{authenticationId}: get: tags: - Profiles summary: Get authentication configuration check status operationId: getAuthentication description: Returns the current status, chronological log messages, and (when finished) structured authentication results for a check started via `POST /authentications`. parameters: - schema: type: string format: uuid description: Identifier returned by the start endpoint required: true description: Identifier returned by the start endpoint name: authenticationId in: path responses: '200': description: OK content: application/json: schema: type: object properties: id: type: string format: uuid description: Identifier of this check status: type: string enum: - CANCELED - FAILED - FINISHED - RUNNING - STARTING description: Current lifecycle state progressRatio: type: number description: Approximate progress between 0 and 1 while the check is running createdAt: type: string description: When the check was started authentication: type: - object - 'null' properties: model_discriminator_: type: string enum: - AUTHENTICATION_RESULT users: type: array items: type: object properties: username: type: string authentication: type: object properties: headers: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values cookies: type: array items: type: object properties: name: type: string domain: type: - string - 'null' path: type: - string - 'null' http_only: type: - boolean - 'null' secure: type: - boolean - 'null' same_site: type: - string - 'null' enum: - Strict - Lax - None - null values: type: array items: type: string required: - name - values query_parameters: type: array items: type: object properties: name: type: string values: type: array items: type: string required: - name - values body: type: object additionalProperties: type: string local_storage: type: object additionalProperties: type: object additionalProperties: type: string session_storage: type: object additionalProperties: type: object additionalProperties: type: string digest: type: string basic: type: string required: - headers - cookies - query_parameters - body - local_storage - session_storage failure_message: type: - string - 'null' is_valid: type: boolean iso_expiration_date: type: string required: - username - authentication - is_valid - iso_expiration_date required: - model_discriminator_ - users description: Null while the check is running. When FINISHED, contains the authenticated users and their tokens. events: type: array items: type: object properties: createdAt: type: string description: When this log entry was recorded level: type: string enum: - DEBUG - ERROR - INFO - WARNING description: Severity of the message stage: type: string enum: - AGENT_ACTION - AGENT_REASONING - CONFIGURATION - EXECUTION description: Phase of the check title: type: string description: Short headline for the message description: type: string description: Full message body required: - createdAt - level - stage - title - description title: AuthenticationEvent description: A single progress or diagnostic message from an authentication configuration check description: Chronological messages from the check, including errors that explain misconfiguration required: - id - status - progressRatio - createdAt - authentication - events '404': description: Not found content: application/json: schema: type: object properties: message: type: string enum: - Not found required: - message title: NotFound description: Returned when the requested resource does not exist components: securitySchemes: apiKey: type: apiKey in: header name: X-ESCAPE-API-KEY