Credentials

Credentials found during the Static Code Analysis, such as Secrets Detection, and Infrastructure checks, such as OSINT (credentials leakage checks stage) or Bruteforcer scan are saved and can be managed via Credentials page:

Credentails matching login/password pair pattern are used by the Bruteforcer scanner to verify their validity.

One can input leaked credentials manually or upload a bulk as JSON list:

Execute the Bruteforcer scan:

And check if confirmed credentials are alerted via scan logs:

Confirmed credentials are updated in Credentials tab via Verified and Details fields:

Click on the Credential name to see full details: