Getting started
What SpectrAI does, the notions to know, the first pentest end to end and the product vocabulary.
SpectrAI tests a named web application, from the Internet (external pentest) or from inside your network through a relay installed on your premises (internal scan). Autonomous agents test the perimeter you have authorised, the evidence is verified automatically and the report is published without human validation.
This section presents the product in a few minutes, explains the model (application, ownership proof, Guidance, pentest, findings, report), then walks through a first external pentest from signup to the report.
In this section
- 01Introducing SpectrAIAn autonomous pentest of a named application, external or internal, with verified evidence, a frozen report and correction retests. What it is, who it is for, and its limits.
- 02Key conceptsTarget, ownership proof, Guidance, pentest, attempt, findings, evidence, attack paths, report, retests: how these objects fit together in SpectrAI.
- 03Your first pentestFrom signup to the report: create the account, register the application, prove the domain, write the Guidance, launch the pentest, read the results and prepare the retests.
- 04GlossaryThe terms used in the application, the reports and this documentation, with their short definition and a link to the page that details them.