LANNERVA · New assessment

Choose an assessment type

Pick a starting point below, then adjust which checks run; every item starts checked, uncheck anything you don't want this run to do.

Pick an option below, then fine-tune what gets checked if you want. Everything is included by default.

Lite

Free-tier checks: passive, read-only, no domain verification needed.

Safe, read-only checks. Nothing to set up first.

Comprehensive

Lite, plus active scanning and every paid-tier check this install supports.

Everything in Lite, plus deeper tests that actively try to find real weaknesses.

Max

AI-agent run: Claude crawls and investigates toward an objective you set, pausing for approval before any exploit-class action. Needs ANTHROPIC_API_KEY; local/CLI dashboard only.

An AI assistant explores your site on its own toward a goal you set, and always asks your permission before trying anything risky.

Retest

Re-run only the check types that found something in a prior run, and diff against it.

Check again and see what's fixed, what's new, and what's still a problem.

Target configuration

Target URL Extra in-scope hosts (optional, one per line)

Website size

Sets how many pages get crawled and how large the active-scan request budget is. Fine-tune either under Advanced below.

Roughly how big is the site? This decides how thorough (and how long) the scan is.

Advanced crawl settings

Max pages to crawl Max crawl depth Max scan requests Concurrent threads 20 by default, matching common fuzzing-tool defaults (e.g. ffuf's own). Set this to 1 for fully serial, the gentlest option, against a target you know is fragile or rate-limited. Timing-based checks (e.g. blind SQLi/command-injection via response delay) always run one at a time regardless of this setting, to keep their own timing measurements accurate; more threads speeds up everything else, not those. How many tests to run at once. 20 by default; set it to 1 if you know the target is fragile or rate-limited. A few specific tests that rely on measuring response delays always run one at a time either way, so they won't speed up from this.

Submit plain GET forms with placeholder values while crawling Submit POST forms (e.g. create/upload/import) with placeholder values while crawling ⚠

Credentials (optional)

Needed for login-aware crawling and any checks that log in repeatedly.

Add a login if you want us to also test pages behind your sign-in.

Configuration check

A quick pass before committing to a full run. Warnings don't block starting, but failures are worth a second look.

A quick check before we start. Warnings are fine; a failure is worth a second look first.

Starting assessment…

Redirecting to the run once it's created.

Choose an assessment type

Lite

Comprehensive

Max

Retest

Checks included

Target configuration

Website size

Small

Medium

Large

Agent objective

Credentials (optional)

Configuration check

Starting assessment…

Log in

Choose an assessment type

Lite

Comprehensive

Max

Retest

Checks included

Target configuration

Website size

Small

Medium

Large

Agent objective

Credentials (optional)

Configuration check

Starting assessment…