Product guide · English
DAST and network reports
Use the local DAST desktop app or browser Network Monitor to collect runtime observations, then inspect the uploaded report and its visibility in vetkit.
Steps
- Open Plugins and check the tools and downloads available to your account. For DAST, start account connection in the desktop app, approve its device code and select the intended workspace.
- Choose an authorized target and scope in the local DAST tool. Scans use ZAP on your machine; the uploaded result is a local-client-attested summary, not a scan executed by the vetkit server.
- For network observations, sign in to Network Monitor, select the browser tab and record the flow you want to inspect. Send the recording to vetkit and review the saved report.
- Check visibility before sharing a network report. Reports support private and workspace sharing; teammates receive a redacted view rather than the sender’s original finding details.
Read the result
A runtime report covers the requests and interactions observed during that session. It is separate from a repository audit and may not exercise authenticated paths, every role or every endpoint.
Limits and availability
Account capabilities, tool availability and run limits apply. Only scan systems you are authorized to test. Local-client-attested results are not independent server verification. Redaction reduces exposure but is not a reason to capture or share unnecessary sensitive traffic.
This guide describes the implemented workflow. The features available in your workspace depend on account capabilities and configuration; advanced workflows are not all included in Free Quick Scan. Check the available controls and the evidence returned by each run.