Infrastructure

Cloud accounts, hosting and databases, connected over MCP so a pentest can read how your app is deployed.

Add an MCP server

AAWS

S3, EC2, security groups, open ports

VVercel

Projects and environment variable names

SSupabase

RLS policies, edge functions

CCloudflare

Zones, DNS records, rulesets

GGoogle Cloud

Storage buckets, IAM policy

RRailway

Projects and service variable names

Connected accounts

No connected accounts yet. Connections give context only — they never grant permission to scan a domain.

Read-only by design. Credentials are encrypted at rest, never appear in tool results, and are stripped from every scan process. Use a read-only IAM role or scoped token. Connections give context only; they do not grant permission to scan a domain.