# ApyGuard Docs

> Documentation for onboarding, core workflows, and authentication in ApyGuard.

## Docs

- [ApyGuard: API Security Platform for Modern Teams](https://docs.apyguard.com/get-started/introduction.md): ApyGuard is an API security and posture management platform that helps teams discover, assess, and continuously monitor API risk across their environments. It connects to API assets and collections, analyzes authentication and exposure, runs security scans, and helps identify vulnerabilities, sensit…
- [Quick Start](https://docs.apyguard.com/get-started/quick-start.md): Create your first asset, import an API collection, configure authentication, and run your first API security scan with ApyGuard.
- [Create Your First Asset](https://docs.apyguard.com/get-started/create-your-first-asset.md)
- [Import an API Collection](https://docs.apyguard.com/get-started/import-collection.md): Import your API specification or collection into ApyGuard so endpoints can be organized, scanned, and monitored effectively.
- [Security Scanning](https://docs.apyguard.com/get-started/security-scanning.md)
- [Assets](https://docs.apyguard.com/core-workflows/assets.md): Learn how assets organize API environments in ApyGuard and act as the foundation for collections, authentication, scanning, and results.
- [API Collections](https://docs.apyguard.com/core-workflows/api-collections.md): Organize imported API specifications and collections in ApyGuard so scanning, authentication, and endpoint selection stay structured.
- [Authorization Settings](https://docs.apyguard.com/core-workflows/authorization-settings.md): Create and manage authorization settings in ApyGuard to control how scans authenticate and evaluate protected API behavior.
- [Credentials](https://docs.apyguard.com/core-workflows/credentials.md): Manage API credentials in ApyGuard for token-based, login-based, OIDC, and OAuth2 authentication workflows.
- [Scheduled Scan Tasks](https://docs.apyguard.com/core-workflows/scheduled-scan-tasks.md): Use scheduled scan tasks in ApyGuard to automate recurring API security checks and monitor changes over time.
- [Authentication Setup](https://docs.apyguard.com/authentication/overview.md): Configure authentication in ApyGuard so scans can test protected endpoints accurately using token, login-based, OIDC, and OAuth2 flows.
- [Predefined Token](https://docs.apyguard.com/authentication/predefined-token.md): Use an existing API key, bearer token, or similar credential in ApyGuard for protected endpoint testing.
- [Login URL](https://docs.apyguard.com/authentication/login-url.md): Configure a login endpoint in ApyGuard so the platform can authenticate dynamically and retrieve tokens during scanning.
- [OIDC](https://docs.apyguard.com/authentication/oidc.md): Configure OpenID Connect authentication in ApyGuard using detected provider metadata and an OIDC credential record.
- [OAuth2 Password](https://docs.apyguard.com/authentication/oauth2-password.md): Configure OAuth2 Password authentication in ApyGuard for providers that support the resource owner password credentials grant.
- [OAuth2 Client Credentials](https://docs.apyguard.com/authentication/oauth2-client-credentials.md): Configure machine-to-machine OAuth2 authentication in ApyGuard using client ID, client secret, and scopes.
- [Authorization Matrix](https://docs.apyguard.com/authentication/authorization-matrix.md): Define role-based access expectations in ApyGuard so scans can evaluate authorization behavior across endpoints.
- [Authentication Issues](https://docs.apyguard.com/authentication/authentication-issues.md): Resolve common authentication setup problems in ApyGuard, including token issues, login misconfiguration, and OIDC or OAuth2 errors.
- [Findings & Results Overview](https://docs.apyguard.com/findings-results/overview.md): Understand how ApyGuard organizes findings, risk context, and remediation information after an API security scan.
- [Understanding Results](https://docs.apyguard.com/findings-results/understanding-results.md): Review ApyGuard findings, risk scores, and supporting context so your team can investigate and remediate API security issues effectively.
- [Vulnerabilities](https://docs.apyguard.com/findings-results/vulnerabilities.md): Review vulnerability findings in ApyGuard and understand how to investigate and prioritize them.
- [Sensitive Data Findings](https://docs.apyguard.com/findings-results/sensitive-data-findings.md): Understand sensitive data findings in ApyGuard and use them to reduce exposure risk across API responses.
- [Risk Scores](https://docs.apyguard.com/findings-results/risk-scores.md): Understand how risk scores in ApyGuard help teams prioritize API security findings.
- [API Security Dashboard](https://docs.apyguard.com/monitoring-and-posture/api-security-posture.md): Use the ApyGuard dashboard to track security posture, findings, and scan activity across API environments.
- [Posture Tracking](https://docs.apyguard.com/monitoring-and-posture/posture-tracking.md): Track changes in API security posture over time with repeated scans and organized findings in ApyGuard.
- [Scan History](https://docs.apyguard.com/monitoring-and-posture/scan-history.md): Review previous scan runs in ApyGuard to understand what changed, when it changed, and where follow-up is needed.
- [Alerts & Notifications](https://docs.apyguard.com/monitoring-and-posture/alerts-and-notifications.md): Use alerts and notifications in ApyGuard to stay aware of important scan activity and security findings.
- [Integrations Overview](https://docs.apyguard.com/integrations/overview.md): Connect ApyGuard with delivery, issue tracking, and API tooling to bring security workflows into existing team processes.
- [GitHub Actions](https://docs.apyguard.com/integrations/github-actions.md): Use GitHub Actions with ApyGuard to align API security scanning with engineering delivery workflows.
- [Jira](https://docs.apyguard.com/integrations/jira.md): Use Jira with ApyGuard to route API security findings into issue tracking and remediation workflows.
- [Postman](https://docs.apyguard.com/integrations/postman.md): Use Postman collections with ApyGuard to import API definitions and keep testing workflows aligned with API structure.
- [Slack](https://docs.apyguard.com/integrations/slack.md): Use Slack with ApyGuard to improve visibility and collaboration around API security findings and updates.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.