📖 Configure Authentication
Authenticated scans are where APIsec finds the vulnerabilities that matter most — authorization flaws, privilege escalation, broken object-level access — because they exercise the API as a real client. This page shows how to add credentials to an application and test them. APIsec supports API Key, Basic, OAuth 2.0, Bearer Token, HMAC, and multi-step Custom authentication.
📖 Manage Headers
Instance-Level Headers
🗃️ SSO Configuration
4 items
📖 Global Credentials
Global Credentials provide a centralized way to manage authentication profiles that can be shared across multiple applications and application environments. Instead of creating and maintaining separate credentials for each application, you can create a single global credential and link it wherever the same authentication configuration is required.