Probely Web Vulnerability Scanning Suite
Quick-Start
Probely is a Web Vulnerability Scanning suite for Agile Teams. It provides continuous scanning of Web Applications and lets you efficiently manage the lifecycle of vulnerabilities found, in a sleek and intuitive API.
Authentication
To use the API, create an API Key:
- Select a target from the drop-down list
- Go to "Settings" page
- Click "Integrations" tab
- Name the API Key (e.g., "example.com_key")
Authorization: JWT eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJqdGkiOiJBRlNJQlp3elFsMDEiLCJ1c2VybmFtZSI6IkNIZ2tkSUROdzV0NSJ9.90UwiPGS2hlvgOLktFU0LfKuatNKmEP79u17VnqT9M
Scan Target
1. Get target list:
curl -X GET \
-H "Content-Type: application/json" \
-H "Authorization: JWT PROBELY_AUTH_TOKEN"
2. Start scan on target ID:
curl -X POST \
-H "Content-Type: application/json" \
-H "Authorization: JWT PROBELY_AUTH_TOKEN"
3. Check scan status:
curl -X GET \
-H "Content-Type: application/json" \
-H "Authorization: JWT PROBELY_AUTH_TOKEN"
View Findings
Get scan results:
curl -X GET \
-H "Content-Type: application/json" \
-H "Authorization: JWT PROBELY_AUTH_TOKEN"
Key Concepts
- Targets define scan scope
- Sites specify entry point and authentication details
- Assets are domains to follow during scans
- Scans run against targets, creating findings
- Findings contain vulnerability details and suggestions
Probely provides continuous scanning, customizable profiles, Slack and Jira integrations, and an API for full integration with CI/CD pipelines.