RedCapra

Target Scan

Run bounded checks against any target you own or are authorized to test.

Website or app URL

Scanner key

Scan presets

Fast setups for common audit modes.

Workspace

Local project, role, schedule, notification, and issue-lane metadata.

Project / workspace

RoleIssue lane

Notification targetShared report expiry days

Engagement

Client, scope, methodology, dates, limitations, and deliverables.

Engagement name

ClientEngagement ID

Lead testerReport audience

Start dateEnd date

MethodologyScope summaryLimitationsDeliverables

Policy profile

Tunes severity and report framing for the audit context.

Profile

Target profile

Stored locally for reports, cadence, and client handoff.

Owner

EnvironmentCadence

Approved scopeNotes

High-risk request / ROE

Scope, approvals, emergency stop, and reversal instructions before sensitive work.

Needs ROEMissing: authorization document, approved test window, emergency stop contact, rollback owner, rollback plan, provider or hosting approval.

Request typeWritten authorization / contract reference

Approved test windowMax rate / intensity cap

Emergency stop contactProvider approval

Excluded targets / no-touch systemsMonitoring and abort triggersBackup / snapshot evidence

Rollback ownerClient signoff name

Rollback / reversal planData handlingNotes / decision recordI have explicit written approval for any state-changing activity and a tested reversal path.

Manual pentest finding

Evidence, repro, access matrix, API notes, rollback, and retest tracking.

Finding title

SeverityWorkstream

Affected URL / objectRole / access matrixAPI collection / route notesEvidence vault notesSteps to reproduce

Expected resultActual result

ImpactRemediationRollback / reversal

Retest statusRetest steps

RedCapra score15/25

Impact3Likelihood3Exploitability3Exposure3Business criticality3

Scan depth

Controls discovery breadth. All modes remain read-only.

Session context

Optional same-origin headers for read-only authenticated scans.

Cookie headerAuthorization headerExtra allowed headers

Repo-side scan

Upload text files for secrets, dependency, and config review.

Repository namePublic GitHub repo URLBranchChoose repo files

I own this target or have explicit permission to test it.

Ready for first contact.

Point RedCapra at any authorized target. Results will appear here with evidence and remediation notes.