Start an authorization scan

Define the target boundary, attach up to three target roles, and launch a read-only ARGUS run.

Unauthenticated target

Scan configuration

v2.5.6Blackbox

Read-only BAC testing within the verified host and path boundary. ARGUS 2.5.6 can attach captured sessions and source-known routes.

ARGUS access

Checking dashboard session...

Account emailOrganization

Target boundary

ARGUS will stay within this host and path.

Target URLAllowed path

Public by design (optional)One glob per line. Findings on matching endpoints are suppressed as intentionally public — use it for surfaces you have already confirmed are meant to be readable by anyone. This never widens what gets scanned.

ModeProfileEnvironment

Single-tenant alpha token

Required without GreenHat session.

Switching access mode reloads this form so verification, attestation, and captured-role state cannot cross workspaces.

I own or control this hostProve control with a same-domain email, DNS TXT, HTTP file, or meta tag.I'm testing a bug-bounty program (I don't own this host)Supply the program/scope URL and acknowledge its public rules instead of proving ownership.

Domain verification

Enter a target URL before verifying the domain.

Verification code

I am authorized to scan this target, and the scope above is restricted to systems I own or am allowed to test.

Target accounts

Attach authenticated roles for access-control comparison. 0 of 3 configured.

Unauthenticated coverage only

No target session is attached. Add an account to test protected routes and role boundaries.

Unauthenticated scan

Enter a target URL.

Verify host
Attest
Scan