Docs

Your First Scan

Scan a website for vulnerabilities in under a minute.

There are three ways to run a scan: the web dashboard, the MCP server, or the REST API directly.

#Web Dashboard

  • 1

    Sign up or log in

    Go to vergate.dev/signup and create an account.
  • 2

    Create a project

    Click New Project and enter a name.
  • 3

    Run a passive scan

    Go to Passive Scan in the sidebar, enter your URL (e.g., https://example.com), and click Scan Now.
  • 4

    View results

    Results appear instantly. Each finding shows severity, likelihood, evidence, and an AI fix prompt.

    • #REST API

    Start a passive scan
    curl -X POST https://api.vergate.dev/api/v1/scan \
  -H "Authorization: Bearer pk_your_key" \
  -H "Content-Type: application/json" \
  -d '{"target_url": "https://example.com"}'

    The response includes a scan_id. Poll for results:

    Get results
    curl https://api.vergate.dev/api/v1/scan/{scan_id}/results \
  -H "Authorization: Bearer pk_your_key"

    #MCP Server

    If you have the MCP server installed (e.g., for Claude Code):

    Use the scan_website tool
    # In Claude Code or any MCP client:
scan_website(url="https://example.com")

    #CLI

    Run a scan directly from the command line:

    CLI scan
    vergate scan https://example.com

    #Free Scan (No Account)

    You can run a free scan without signing up. Go to vergate.dev/free-scan and enter a URL. Free users get 3 passive scans total.

    #Scan Types

    #Passive Scan

    Checks HTTP headers, cookies, exposed files, information leakage, and more. Runs instantly (3-5 seconds). No active probing — safe for production.

    #Active Scan

    Deep vulnerability testing for SQL injection, XSS, open redirects, and more. Runs as a background job (1-5 minutes). Requires a paid plan.

    Tip. Active scans are published to a background worker. You can poll the API or check the dashboard for progress and results.

    #Understanding Results

    Each finding has:

    Severity — CRITICAL, HIGH, MEDIUM, LOW, INFO
    Likelihood — OBSERVED (confirmed), LIKELY, POSSIBLE, INFORMATIONAL
    Evidence — The specific data that triggered the finding
    Remediation — How to fix it
    AI Prompt — Copy-paste prompt for ChatGPT/Claude to generate the fix