Pentests

List pentests

Retrieve pentests with optional filters and pagination.

curl -X GET "https://app.strix.ai/api/v1/scans?limit=20" \
  -H "Authorization: Bearer <YOUR_API_TOKEN>"

Required scope: scans:read

Start a new pentest

Provide domain_ids for blackbox pentests or repository_ids for whitebox pentests.

curl -X POST "https://app.strix.ai/api/v1/scans" \
  -H "Authorization: Bearer <YOUR_API_TOKEN>" \
  -H "Content-Type: application/json" \
  -d '{
    "domain_ids": ["<DOMAIN_ID>"],
    "concerns": "Check for authentication bypass vulnerabilities"
  }'

Required scope: scans:write

Get pentest detail

curl -X GET "https://app.strix.ai/api/v1/scans/<SCAN_ID>" \
  -H "Authorization: Bearer <YOUR_API_TOKEN>"

Required scope: scans:read

Rerun a pentest

Re-execute a previous pentest configuration:

curl -X POST "https://app.strix.ai/api/v1/scans/<SCAN_ID>/rerun" \
  -H "Authorization: Bearer <YOUR_API_TOKEN>"

Required scope: scans:write

Cancel a pentest

Cancel a pending or running pentest:

curl -X POST "https://app.strix.ai/api/v1/scans/<SCAN_ID>/cancel" \
  -H "Authorization: Bearer <YOUR_API_TOKEN>"

Required scope: scans:write

Download report

Download the PDF report for a completed pentest:

curl -X GET "https://app.strix.ai/api/v1/scans/<SCAN_ID>/report" \
  -H "Authorization: Bearer <YOUR_API_TOKEN>" \
  -o report.pdf

Required scope: scans:read

Retest findings

List the retests recorded for a pentest:

curl -X GET "https://app.strix.ai/api/v1/scans/<SCAN_ID>/retests" \
  -H "Authorization: Bearer <YOUR_API_TOKEN>"

Required scope: scans:read Re-run validation against every finding in a pentest:

curl -X POST "https://app.strix.ai/api/v1/scans/<SCAN_ID>/retest-all" \
  -H "Authorization: Bearer <YOUR_API_TOKEN>"

Required scope: scans:write

Get a reusable template

Retrieve a pentest’s configuration as a template you can use to start new pentests:

curl -X GET "https://app.strix.ai/api/v1/scans/<SCAN_ID>/template" \
  -H "Authorization: Bearer <YOUR_API_TOKEN>"

Required scope: scans:read

Delete a pentest

curl -X DELETE "https://app.strix.ai/api/v1/scans/<SCAN_ID>" \
  -H "Authorization: Bearer <YOUR_API_TOKEN>"

Required scope: scans:write

Getting Started

Guides

List pentests

Start a new pentest

Get pentest detail

Rerun a pentest

Cancel a pentest

Download report

Retest findings

Get a reusable template

Delete a pentest

​List pentests

​Start a new pentest

​Get pentest detail

​Rerun a pentest

​Cancel a pentest

​Download report

​Retest findings

​Get a reusable template

​Delete a pentest

List pentests

Start a new pentest

Get pentest detail

Rerun a pentest

Cancel a pentest

Download report

Retest findings

Get a reusable template

Delete a pentest