Keep scan data on your own infrastructure
Keep scan data on your own infrastructure with Argus Pentest: a practical, on-prem approach built for Azerbaijani teams.
Self-Hosted Authenticated Security Scanning
Argus Pentest is a specialized engine within the Argus self-hosted AI testing platform, designed for authenticated dynamic security scanning of enterprise web applications and their APIs. By integrating seamlessly with the platform's QA and AI engines, it operates under a single console and sign-in, sharing a centralized encrypted credential store and unified model settings. This architecture ensures that security testing is not a siloed process but a coordinated effort that leverages the same infrastructure used for quality assurance and AI validation. The core differentiator of Argus Pentest is its ability to operate as a real logged-in user. Rather than stopping at the login page, the system uses scripted logins to retrieve session cookies and bearer tokens, allowing the scanner to penetrate the authenticated surface of an application. Because the entire platform is self-hosted, all sensitive scan data, credentials, and final reports remain strictly on your own infrastructure, eliminating external SaaS dependencies and ensuring total data sovereignty.
Advantages of the Argus Pentest Approach
Complete data sovereignty by keeping all scan data and reports on your own infrastructure.
Deep visibility into authenticated surfaces via synthesized API specs and session-aware scanning.
High signal-to-noise ratio through a mandatory re-verification process that quarantines non-reproducible findings.
Secure, centralized credential management using a shared encrypted store across QA and security engines.
Strict operational safety ensured by an explicit allow-list of approved targets.
Future-proof modularity using the open-source Deep Eye engine, allowing for upgrades without platform disruption.
Core Capabilities of Argus Pentest
Authenticated Scanning
Utilizes scripted logins through an encrypted credential store to obtain session cookies and bearer tokens, allowing the scanner to operate as a real logged-in user.
Synthesized API Discovery
Endpoints discovered during login and crawling seed a synthesized API specification, ensuring the scan reaches the authenticated surface.
AI-Driven Payload Generation
Integrates a model specifically for payload generation and finding triage using a text-in, text-out approach.
Strict Target Control
Scans are executed only against an explicit allow-list of approved targets to prevent unauthorized scanning.
Modular Engine Architecture
Powered by the open-source Deep Eye engine via CLI contract, allowing the scanner to be upgraded or replaced without affecting the platform.
The Scanning Workflow
Frequently Asked Questions
How does the platform handle authentication failures?
A scanner that cannot authenticate is treated as an environment failure rather than a security finding. If a target requires a login but cannot be authenticated, the scan is refused to avoid misreading auth-wall errors as exploits.
How are findings validated to ensure accuracy?
Every finding is re-checked against the live target. Findings that cannot be reproduced—such as those where the endpoint was never reached or produced a uniform response—are quarantined and excluded from severity totals.
What happens if a scan is blocked by an authentication wall?
If a scan reaches the target but cannot exercise it due to an authentication wall, the result is marked as inconclusive rather than being reported as clean, ensuring no false sense of security.
Is the AI model used for visual analysis or screen scraping?
No, the AI model is used strictly for payload generation and finding triage on a text-in, text-out basis; it does not utilize vision capabilities.
Can the scanning engine be updated or replaced?
Yes. Because the platform uses the open-source Deep Eye engine via a CLI contract, the scanner can be upgraded or replaced without needing to modify the broader platform infrastructure.
Secure Your Infrastructure Today
Deploy Argus Pentest to keep your security data and credentials under your own control.
Request a demo