Getting Started
Welcome to Auto-Offensive — the automated offensive security platform. This guide walks you through the core concepts, installs the CLI, and runs your first scan.
What is Auto-Offensive?
Auto-Offensive is a platform that automates the entire offensive security workflow — from reconnaissance to vulnerability scanning, secret detection, and AI-driven analysis. It runs industry-standard tools like subfinder, httpx, naabu, nuclei, gitleaks, and gobuster in sandboxed containers and unifies the results in a single UI.
You interact with the platform through three interfaces:
Core Concepts
Before you start, get familiar with these 7 key terms:
Typical workflow: Create a Project → add Targets → submit a Scan → Steps execute → produce Findings → use AI Analysis or Reports.
1. Create an Account
Go to the website to create your account.
Signing up via UI
- Navigate to the Sign Up page.
- Enter your email and password.
- Click the 'Create Account' button.
- Check your email to verify your account.
2. Run your first scan
Create a project and submit a scan through the Web Dashboard:
How to use via UI
- Click the 'New Project' button at the top right.
- Enter your Project name and click save.
- Go into the Project and click 'New Scan'.
- Enter a Target (e.g., example.com).
- Select Basic Mode and click Start Scan.
3. View results
After the scan completes, you can view the list of all findings:
Viewing findings via UI
- Go to the 'Findings' or 'Issues' tab on the Scan results page.
- You will see a table showing the Severity, Host, and details.
- You can click on each issue to see the remediation and additional AI Analysis.
Next steps
Now you know the basics. Explore further:
Scanning
Three scan modes
Learn Basic, Medium, and Advanced pipeline scans
AI
AI Analysis
Get analysis and next-step suggestions from Claude AI
Reports
Generate Reports
Export findings as PDF, DOCX, XLSX, or JSON
CI/CD
CI/CD Integration
Automate scans in GitHub Actions, GitLab CI, Jenkins
- Forgetting to escape the pipe — use
|not\| - Daily scan quota — free tier is limited to 3 scans/day