| Scan ID | Status | Spec | Base URL | Tests | Pass Rate | Healing | Started | Completed | Export |
|---|---|---|---|---|---|---|---|---|---|
| 🔍No scans yet | |||||||||
| Scan ID | Status | Spec | Base URL | Tests | Pass Rate | Healing | Started | Completed | Export |
|---|---|---|---|---|---|---|---|---|---|
| 🔍No scans yet | |||||||||
| Severity | Check ID | Endpoint | Title | Risk Priority | Confidence |
|---|---|---|---|---|---|
🔒Run a security scan to see findings | |||||
| # | Started | Completed | Duration | Status | Findings | Scan ID |
|---|---|---|---|---|---|---|
| No runs yet | ||||||
| Endpoint ⇅ | Fault Likelihood ⇅ | Confidence ⇅ |
|---|
| Scan ID | Status | Spec | Base URL | Tests | Pass Rate | Started | Duration | Export |
|---|---|---|---|---|---|---|---|---|
| 🔍No scans yet | ||||||||
curl -H "X-API-Key: <your-key>" http://localhost:8080/api/v1/scan
POST <webhook_url>
X-NAT-Signature: sha256=<hmac>
{"event":"scan.completed","scan_id":"…"}
GitHub Actions
- uses: bg-playground/nat-action@v1
with:
spec: openapi.yaml
base-url: https://api.example.com
api-key: ${{ secrets.NAT_API_KEY }}
Docker
docker run --rm ghcr.io/bg-playground/nat-engine:latest \ nat scan --spec openapi.yaml --base-url https://api.example.com
| Task ID | Name | Result | Duration | Error | Artifact |
|---|---|---|---|---|---|
| 🧪No test results yet — run a functional scan first | |||||
Manage your payment methods, view invoices, and update your subscription in the Stripe Customer Portal.
Upload an OpenAPI spec and let the LLM generate a priority-ranked, risk-assessed test plan. Review the plan, toggle groups on/off, then execute it as a scan batch.
Describe what you want to test in plain English — API or browser tests — and the LLM will generate executable scenarios. Review them below, then run the ones you approve.
Configure Slack and Teams webhooks in ⚙️ Settings to receive
notifications for plan.generated, finding.commented,
and schedule.fired events.