AgentDASTOn this page
From website assessment to security report.
By Tornike@realtornikeo
Last updated
Follow the API reference or agent connection guide to run a regular assessment. AgentDAST probes your website, records evidence, and publishes reviewed findings to your workspace.
1. Open your workspace
A workspace invitation opens your website's dashboard directly. Existing security issues and reports appear there, with detailed evidence available through your subscription. Your coding agent can use the setup instructions at the top of the dashboard.
2. Run an assessment
Use the dashboard's retest action or send POST /v1/runs with your target ID and mode: "assessment". Your agent can discover the website and any active run through GET /v1/workspace. The API reference covers registration and ownership checks for newly connected projects.
The assessment agent explores application behavior within the configured scope and budget. It records requests, responses, and observations. Each new run uses a unique idempotency key so retries do not start duplicate work.
3. Let AI review the evidence
A separate AI reviewer evaluates observations, reproduction evidence, and business impact. It can investigate further and reject unsupported findings. Routine review and report publication happen automatically.
4. Read the report and track changes
Published reports include severity, affected pages, evidence, reproduction steps, and recommended next steps. They update your open security issues, health score, severity counts, and dashboard history. A later assessment resolves an issue when the reviewer has supporting evidence.
Use the results guide to interpret report status. Monitoring repeats assessments on your plan's schedule and sends an email when a significant new issue is reviewed.