Getting Started

Quick Start Guide

Get up and running with APVISO in under ten minutes — from sign-up to your first vulnerability report.

Create Your Account

Head to the APVISO dashboard and sign up with your email address or SSO provider. You will receive a verification email — click the link to activate your account. Once logged in you land on the dashboard home page.

Add a Target

Navigate to Targets and click Add Target. Enter the domain or IP address you want to test (for example app.example.com). APVISO validates the input and rejects internal or reserved IP ranges to prevent misuse.

Verify Ownership

Before any scan can run, you must prove you control the target. APVISO offers three verification methods:

  • DNS TXT record — add a TXT record with the value shown in the dashboard to your domain's DNS zone.
  • File upload — place a verification file at /.well-known/penterep-verify.txt on your web server.
  • Meta tag — add a <meta> tag to the <head> of your site's home page.

Click Verify once the record or file is in place. Verification is cached per target, so you only need to do this once.

Run Your First Scan

Open your verified target and click Start Scan. Choose a model preset — free is a great starting point for a quick, no-cost assessment. Click Confirm to queue the scan.

APVISO spins up four AI agents (recon, scanner, lead, and reporter) to test your target. Findings stream to the dashboard in real-time as agents discover vulnerabilities.

Review Results

Once the scan completes, visit the Findings tab to see every discovered vulnerability sorted by severity. Each finding includes a description, evidence, reproduction steps, and remediation guidance. You can also download a full PDF report from the Reports tab.

Next Steps

  • Set up scheduled scans for continuous coverage.
  • Connect integrations (Jira, Slack, webhooks) to route findings into your existing workflow.
  • Explore the compliance dashboard to map findings against frameworks like OWASP Top 10 and PCI-DSS 4.