# Bright-docs Documentation > Bright Security helps companies secure web applications with AI-powered application security testing solution that quickly detects vulnerabilities. ## Docs: Welcome - [What is Bright DAST?](https://docs.brightsec.com/docs/introducing-to-bright.md): Build Secure Apps & APIs. Fast. - [About Docs](https://docs.brightsec.com/docs/about-docs.md) - [Support](https://docs.brightsec.com/docs/support.md): We are here to help you - [Accessibility](https://docs.brightsec.com/docs/accessibility.md) ## Docs: DEPLOYMENT OPTIONS - [Overview](https://docs.brightsec.com/docs/deployment-options.md): Deployment options - [SaaS Deployment](https://docs.brightsec.com/docs/saas-deployment.md) - [Private Cloud Deployment](https://docs.brightsec.com/docs/private-cloud.md) ## Docs: Getting Started - [Quickstart](https://docs.brightsec.com/docs/quickstart.md) ## Docs: Onboarding your targets - [Authentication](https://docs.brightsec.com/docs/creating-authentication.md): Before following the instructions below, ensure that your application and authenticated resources are accessible to the Bright engine, either directly from the Internet or via a Repeater. - [Add an Authentication Object](https://docs.brightsec.com/docs/add-new-auth-object.md): This page describes adding a new Authentication Object to a scan in the Bright web app. - [Configuring Recorded Browser-Based Form Authentication](https://docs.brightsec.com/docs/configure-recorded-browser-based-form-authentication.md): Before following the instructions below, ensure that your application and authenticated resources are accessible to the Bright engine, either directly from the Internet or via the Repeater. - [Configuring Manual Browser-Based Form Authentication](https://docs.brightsec.com/docs/configure-multi-step-browser-based-form-authentication.md): Before following the instructions below, ensure that your application and authenticated resources are accessible to the Bright engine, either directly from the Internet or via the Repeater. - [Configuring Header Authentication](https://docs.brightsec.com/docs/configure-header-authentication.md): Before following the instructions below, ensure that your application and authenticated resources are accessible to the Bright engine, either directly from the Internet or via the Repeater. - [Configuring OIDC Connect (OAuth)](https://docs.brightsec.com/docs/configure-oidc-connect-oauth.md): Before following the instructions below, ensure that your application and authenticated resources are accessible to the Bright engine, either directly from the Internet or via the Repeater. - [Configuring Custom API Authentication Flow](https://docs.brightsec.com/docs/configure-custom-multi-step-authentication.md): Before following the instructions below, ensure that your application and authenticated resources are accessible to the Bright engine, either directly from the Internet or via the Repeater. - [Configuring NTLM Authentication](https://docs.brightsec.com/docs/configure-ntlm-authentication.md): Before following the instructions below, ensure that your application and authenticated resources are accessible to the Bright engine, either directly from the Internet or via the Repeater. - [Configure OTP Entry Across Multiple Input Fields](https://docs.brightsec.com/docs/configure-otp-entry-across-multiple-input-fields.md) - [Testing Authentication](https://docs.brightsec.com/docs/testing-authentication.md) - [Bright Authentication Recorder](https://docs.brightsec.com/docs/bright-authentication-recorder.md) - [Google Chrome DevTools](https://docs.brightsec.com/docs/google-chrome-devtools.md) - [String Interpolation Syntax](https://docs.brightsec.com/docs/string-interpolation-syntax.md) - [Email OTP](https://docs.brightsec.com/docs/email-otp.md) - [Discovery](https://docs.brightsec.com/docs/discovery.md): Discovery is a process of finding Entrypoints. This can be done once and reused going forward, assuming the target does not change. - [Add Entrypoints to your Project](https://docs.brightsec.com/docs/add-entrypoints-to-your-project.md): Bright provides the following methods of finding Entrypoints. Use links to the relevant articles to get more details. - [Create a Single Entrypoint](https://docs.brightsec.com/docs/create-a-single-entrypoint.md) - [Crawler](https://docs.brightsec.com/docs/crawler.md): Bright can crawl your web application to define the attack surface. This option does not require any details that might get you tangled. To run a security scan using a crawler, you simply need to… - [.HAR file](https://docs.brightsec.com/docs/discovering-with-a-har.md): An HTTP Archive File (.HAR file) is a recorded session of user interaction with an application. The .HAR file keeps all the HTTP requests and responses between the web client and web application. - [Creating a .HAR file](https://docs.brightsec.com/docs/creating-a-har-file.md) - [API Schema: discovering, configuring](https://docs.brightsec.com/docs/discovering-api-endpoints.md): To discover API entrypoints, upload an API schema file to Bright. For a discovery to be successful, please make sure that you are using a valid schema that is configured in compliance with the… - [How to Validate Uploaded File: OpenAPI, Swagger, Postman](https://docs.brightsec.com/docs/entrypoints-validation-checklists.md) - [API Schema Troubleshooting](https://docs.brightsec.com/docs/api-schema-troubleshooting.md): Bright parses an uploaded API schema to define the attack surface of the scanned target. If the schema is misconfigured, Bright displays the corresponding warnings and error messages in the Schema… - [Entrypoints](https://docs.brightsec.com/docs/entrypoints.md) - [Adding a single Entrypoint](https://docs.brightsec.com/docs/adding-a-single-entrypoint.md) - [Overview Entrypoints](https://docs.brightsec.com/docs/overview-entrypoints.md) - [MCP Entry Points](https://docs.brightsec.com/docs/mcp-entry-points.md) - [How to Add Bright to the WAF Allowlist](https://docs.brightsec.com/docs/how-to-add-bright-to-the-waf-allowlist.md) ## Docs: TESTING YOUR TARGETS - Scans Overview - [Modern Scan](https://docs.brightsec.com/docs/modern-scans.md): Testing your targets - [Legacy Scan](https://docs.brightsec.com/docs/legacy-scan.md): Testing your targets - Managing Scans - [Creating a Scan](https://docs.brightsec.com/docs/creating-a-modern-scan.md) - [Creating a Legacy Scan](https://docs.brightsec.com/docs/creating-a-new-scan.md) - [Create Scan By Status](https://docs.brightsec.com/docs/create-scan-by-status.md) - [Retesting a Scan](https://docs.brightsec.com/docs/retesting-a-scan.md) - [Pausing a Scan or Discovery](https://docs.brightsec.com/docs/pausing-a-scan-or-discovery.md) - [Deleting a Scan](https://docs.brightsec.com/docs/deleting-a-scan.md) - [Managing Scan Templates](https://docs.brightsec.com/docs/managing-scan-templates.md) - [Troubleshooting Scans](https://docs.brightsec.com/docs/troubleshooting-scans.md) - Reviewing Scan Results - [Scans Summary](https://docs.brightsec.com/docs/scans-summary.md) - [Issues Summary](https://docs.brightsec.com/docs/issue-summary.md) - [Reviewing Scan Details](https://docs.brightsec.com/docs/reviewing-scan-details.md) - [Reviewing Scan History](https://docs.brightsec.com/docs/reviewing-scan-history.md) - [Modifying Future Scan Settings](https://docs.brightsec.com/docs/modifying-future-scan-settings.md) - [Exporting a Scan Report](https://docs.brightsec.com/docs/exporting-a-scan.md) - [Reviewing Entrypoints](https://docs.brightsec.com/docs/reviewing-entrypoints.md) - [Workflows](https://docs.brightsec.com/docs/workflows.md) ## Docs: STAR - [STAR Harness](https://docs.brightsec.com/docs/star-harness.md) - [Capabilities & Use Cases](https://docs.brightsec.com/docs/star-capabilities.md) - [Fuzzing Mode](https://docs.brightsec.com/docs/star-fuzzing-mode.md) - [Installation & CI Integration](https://docs.brightsec.com/docs/star-installation.md) - [Prerequisites](https://docs.brightsec.com/docs/star-prerequisites.md) - [AWS Bedrock Authentication with IAM and OIDC](https://docs.brightsec.com/docs/star-bedrock-iam.md) - [Run STAR Locally](https://docs.brightsec.com/docs/star-run-locally.md) - [Logging & Troubleshooting](https://docs.brightsec.com/docs/star-logging-and-troubleshooting.md) - [FAQ](https://docs.brightsec.com/docs/star-faq.md) - [STAR Plugin (IDE)](https://docs.brightsec.com/docs/star-plugin.md): Bright Dynamic Testing agents and skills for AI coding tools (Cursor, Claude Code, Codex, GitHub Copilot, and Antigravity CLI) - [Agents & Skills](https://docs.brightsec.com/docs/star-plugin-agents-and-skills.md): The orchestration agents and building-block skills that power the STAR Plugin - [Installation](https://docs.brightsec.com/docs/star-plugin-installation.md): Install the STAR Plugin in your AI coding tool - [Devin (Desktop & CLI)](https://docs.brightsec.com/docs/star-plugin-devin.md): Install and use the STAR Plugin in Devin Desktop, the Devin CLI, and cloud sessions - [Usage & Examples](https://docs.brightsec.com/docs/star-plugin-usage.md): Common scanning scenarios and example prompts for the STAR Plugin agents - [FAQ](https://docs.brightsec.com/docs/star-plugin-faq.md): Common questions about the STAR Plugin (setup, credentials, Repeater, scanning, and remediation) ## Docs: Dashboard - [Project Dashboard](https://docs.brightsec.com/docs/project-dashboard.md): The Project Dashboard provides an overview of each project’s security posture. - [Organization Dashboard](https://docs.brightsec.com/docs/organization-dashboard.md) - [Dashboard Severity Filter](https://docs.brightsec.com/docs/dashboard-severity-filter.md) ## Docs: Advanced Setup - [Managing Organization](https://docs.brightsec.com/docs/manage-your-organization.md): The **Settings** option enables Bright administrators to manage organization-level settings and policies. - [Managing Organization Members](https://docs.brightsec.com/docs/manage-organization-members.md) - [Managing Organization Groups](https://docs.brightsec.com/docs/manage-organization-groups.md) - [Managing Custom Roles](https://docs.brightsec.com/docs/manage-custom-roles.md) - [Default Roles](https://docs.brightsec.com/docs/default-roles.md) - [Support Contact Branding](https://docs.brightsec.com/docs/support-contact-branding.md) - [Managing Access Scopes](https://docs.brightsec.com/docs/manage-access-scopes.md) - [Organization API Key Scopes](https://docs.brightsec.com/docs/organization-api-key-scopes.md) - [Personal API Key Scopes](https://docs.brightsec.com/docs/personal-api-key-scopes.md) - [Project API Key Scopes](https://docs.brightsec.com/docs/project-api-key-scopes.md) - [Role Management Scopes](https://docs.brightsec.com/docs/role-management-scopes.md) - [Managing Personal Account](https://docs.brightsec.com/docs/manage-your-personal-account.md): The user settings enable you to configure your personal account - [Managing Projects](https://docs.brightsec.com/docs/manage-projects.md) - [Project Classification](https://docs.brightsec.com/docs/project-classification.md) - [Managing Bright File Storage](https://docs.brightsec.com/docs/managing-bright-file-storage.md) - [Managing Audit Log](https://docs.brightsec.com/docs/managing-audit-log.md) - [Baseline Parameters](https://docs.brightsec.com/docs/baseline-parameters.md) - [Project-Level Email Notifications](https://docs.brightsec.com/docs/project-based-notifications.md) - [Support for Applications with Single-Tab Session Restriction](https://docs.brightsec.com/docs/single-tab-discover-and-scans.md) - [Workload Identity Federation](https://docs.brightsec.com/docs/workload-identity-federation.md) - [Bright Optimizer](https://docs.brightsec.com/docs/scan-optimizer.md) ## Docs: Bright MCP - [Configure Bright MCP in VSCode](https://docs.brightsec.com/docs/configure-in-vscode.md): How to configure the Bright MCP in VSCode - [Configure Bright MCP in Augment Code](https://docs.brightsec.com/docs/configure-bright-mcp-in-augment-code.md): This page will guide you on how to setup Bright's MCP in Augment Code - [Bright MCP Tools](https://docs.brightsec.com/docs/bright-mcp-tools.md): Bright's MCP tools and capabilities ## Docs: Bright CLI - [CLI Overview](https://docs.brightsec.com/docs/about-bright-cli.md): Bright CLI - [Installation Guide](https://docs.brightsec.com/docs/cli-installation-guide.md) - [Minimal requirements](https://docs.brightsec.com/docs/cli-minimal-requirements.md) - [Install as standalone](https://docs.brightsec.com/docs/cli-standalone-installation.md) - [Install as Docker](https://docs.brightsec.com/docs/cli-docker-installation.md) - [Install as Helm Chart](https://docs.brightsec.com/docs/install-as-helm-chart.md) - [Install as NPM / Yarn](https://docs.brightsec.com/docs/cli-npm-yarn-installation.md) - [Install as Windows installer (MSI)](https://docs.brightsec.com/docs/cli-windows-installer-msi.md) - [Supported Versions](https://docs.brightsec.com/docs/cli-supported-versions.md) - [Command List](https://docs.brightsec.com/docs/command-list.md) - Discoveries - [Running a Discovery](https://docs.brightsec.com/docs/cli-running-a-discovery.md) - [Stopping a Discovery](https://docs.brightsec.com/docs/cli-stopping-a-discovery.md) - [Rerunning a Discovery](https://docs.brightsec.com/docs/cli-rerunning-a-discovery.md) - [Polling a Discovery](https://docs.brightsec.com/docs/cli-polling-a-discovery.md) - Entrypoints - [Listing Entrypoints](https://docs.brightsec.com/docs/cli-listing-entrypoints.md) - [Updating a Host](https://docs.brightsec.com/docs/cli-update-host.md) - [Polling an Update Host](https://docs.brightsec.com/docs/cli-polling-update-host.md) - Repeaters - [Initializing the Repeater](https://docs.brightsec.com/docs/cli-initializing-the-repeater.md) - [Testing Network Connectivity](https://docs.brightsec.com/docs/cli-testing-network-connectivity.md) - Scans - [Running a Scan](https://docs.brightsec.com/docs/cli-running-a-scan.md) - [Stopping a Scan](https://docs.brightsec.com/docs/cli-stopping-a-scan.md) - [Retesting a Scan](https://docs.brightsec.com/docs/cli-retesting-a-scan.md) - [Checking Scan Status](https://docs.brightsec.com/docs/cli-checking-scan-status.md) - [Auto-resolve vulnerablities](https://docs.brightsec.com/docs/auto-resolve-vulnerablities.md) - [Auto Resolve Support by Test Type](https://docs.brightsec.com/docs/auto-resolve-support-by-test-type.md) - Storage - [Uploading an Archive](https://docs.brightsec.com/docs/cli-uploading-an-archive.md): Uploads an archive to Bright - [Configuration Files](https://docs.brightsec.com/docs/cli-configuration-files.md) - Troubleshooting - [Standalone executables](https://docs.brightsec.com/docs/standalone-executables.md) - [Docker](https://docs.brightsec.com/docs/cli-troubleshooting-docker.md) - [NPM / Yarn](https://docs.brightsec.com/docs/cli-troubleshooting-npm-yarn.md) - [Windows Installer (MSI)](https://docs.brightsec.com/docs/cli-troubleshooting-windows-installer.md) ## Docs: Bright Repeater - [Repeaters Overview](https://docs.brightsec.com/docs/on-premises-repeater-local-agent.md) - [Repeater Runtime Indicators](https://docs.brightsec.com/docs/repeater-runtime-indicators.md) - [Repeater Prerequisites](https://docs.brightsec.com/docs/repeater-prerequisites.md) - [Managing Repeaters](https://docs.brightsec.com/docs/manage-repeaters.md) - [Scanning at the Enterprise Level](https://docs.brightsec.com/docs/scanning-at-the-enterprise-level.md) - [Using Repeater Scripts](https://docs.brightsec.com/docs/repeater-scripts.md) - [HMAC Use Cases](https://docs.brightsec.com/docs/repeater-scripts-use-cases.md): Below are some examples how you can use Repeater scripts during scanning of a local target. - [Managing Repeater Scripts](https://docs.brightsec.com/docs/manage-repeater-scripts.md): Repeater Scripts allow you to add, change or compute some part of a scan request before it is dispatched to the target. - [Repeaters Troubleshooting](https://docs.brightsec.com/docs/repeaters-troubleshooting.md): The purpose of this section is to help you solve common problems that you may encounter while using the Repeater. ## Docs: Bright REST API - [REST API Overview](https://docs.brightsec.com/docs/about-bright-api.md) ## Docs: Integrations - [Integrations Overview](https://docs.brightsec.com/docs/integrations-overview.md) - [Jira](https://docs.brightsec.com/docs/integrations-jira.md) - [GitHub](https://docs.brightsec.com/docs/integrations-github.md) - [Slack](https://docs.brightsec.com/docs/integrations-slack.md) - [Azure Boards](https://docs.brightsec.com/docs/integrations-azure-boards.md) - [GitLab Boards](https://docs.brightsec.com/docs/integrations-gitlab-boards.md) - [Snyk Validation Integration](https://docs.brightsec.com/docs/integrations-snyk.md) - [WIZ](https://docs.brightsec.com/docs/wiz.md) - [Xygeni](https://docs.brightsec.com/docs/xygeni.md) - [Tenable](https://docs.brightsec.com/docs/tenable.md) - [Cycode ](https://docs.brightsec.com/docs/cycode.md) - [Legit](https://docs.brightsec.com/docs/legit.md) - [Integrating with the Bright API](https://docs.brightsec.com/docs/integrating-with-the-bright-api.md): This guide provides instructions for our partners on how to use the Bright REST API to pull project and vulnerability data into your own platform. The primary workflow involves fetching projects,… - [Adding an Integration to a Project](https://docs.brightsec.com/docs/adding-an-integration-to-a-project.md) - [Integrating a Project with Webhooks](https://docs.brightsec.com/docs/integrating-a-bright-project-with-webhooks.md) - [Configuring Single Sign-On](https://docs.brightsec.com/docs/configure-sso.md) - [SAML SSO](https://docs.brightsec.com/docs/saml-sso.md) - [Okta SSO and Provisioning](https://docs.brightsec.com/docs/okta-sso-and-provisioning.md) - [Generic SAML Okta SSO and Provisioning](https://docs.brightsec.com/docs/copy-of-okta-sso-and-provisioning.md) - [Google SSO](https://docs.brightsec.com/docs/google-sso.md) - [Azure AD: Service Provider initiated SSO and Provisioning](https://docs.brightsec.com/docs/azure-sso-and-provisioning.md) - [Azure AD: Identity Provider initiated SSO](https://docs.brightsec.com/docs/azure-sso-idp.md) - [CI/CD Pipeline Integrations](https://docs.brightsec.com/docs/integrate-bright-with-your-cicd-pipeline.md) - [GitHub Actions](https://docs.brightsec.com/docs/github-actions.md) - [CircleCI](https://docs.brightsec.com/docs/circleci.md) - [Jenkins](https://docs.brightsec.com/docs/jenkins.md) - [Azure Pipelines](https://docs.brightsec.com/docs/azure-pipelines.md) - [Travis CI](https://docs.brightsec.com/docs/travis-ci.md) - [JFrog](https://docs.brightsec.com/docs/jfrog.md) - [GitLab](https://docs.brightsec.com/docs/gitlab.md) - [TeamCity](https://docs.brightsec.com/docs/team-city.md) - CI/CD Pipeline Integration Examples - [Jenkins Integration Examples](https://docs.brightsec.com/docs/jenkins-integration-examples.md): This section provides the Jenkins integration examples for different use cases. - [Travis CI Integration Examples](https://docs.brightsec.com/docs/travis-ci-integration-examples.md): This section provides the Travis CI integration examples for different use cases. - [GitLab Integration Examples](https://docs.brightsec.com/docs/gitlab-integration-examples.md) - [Bright Security Github Plugin](https://docs.brightsec.com/docs/bright-security-github-agent.md) - [Bright Security Copilot SubAgent for existing customers](https://docs.brightsec.com/docs/bright-security-copilot-subagent-for-existing-customers.md) ## Docs: Knowledge base - [Troubleshooting](https://docs.brightsec.com/docs/troubleshooting.md) - [Troubleshoot Scan and Discovery Execution Issues](https://docs.brightsec.com/docs/troubleshooting-scan-and-discovery-execution-issues.md): WORK IN PROGRESS - [Troubleshoot Scan and Discovery Coverage Issues](https://docs.brightsec.com/docs/troubleshoot-scan-and-discovery-coverage-issues.md) - [Troubleshoot Low Scan Health](https://docs.brightsec.com/docs/troubleshoot-low-scan-health.md) - [Troubleshoot Long-Running Scans](https://docs.brightsec.com/docs/troubleshoot-long-running-scans.md) - [Vulnerabilities Index](https://docs.brightsec.com/docs/vulnerabilities-index.md): This section lists all the test buckets and provide a list of the vulnerabilities, as well as detailed information about each of them, that can be detected by Bright. - [Test Buckets](https://docs.brightsec.com/docs/test-buckets.md) - [Advanced Attacks](https://docs.brightsec.com/docs/advanced-attacks.md) - [API Attacks](https://docs.brightsec.com/docs/api-attacks.md) - [Business Logic Attacks](https://docs.brightsec.com/docs/business-logic-attacks.md) - [Client-Side Attacks](https://docs.brightsec.com/docs/client-side-attacks.md) - [CVE Tests](https://docs.brightsec.com/docs/cve-tests.md) - [Legacy Attacks](https://docs.brightsec.com/docs/legacy-attacks.md) - [MCP Attacks](https://docs.brightsec.com/docs/mcp-attacks.md) - [Multiple Authentication Attacks](https://docs.brightsec.com/docs/multiple-authentication-attacks.md) - [Server-Side Attacks](https://docs.brightsec.com/docs/server-side-attacks.md) - List of Vulnerabilities - [Amazon AWS S3 bucket takeover](https://docs.brightsec.com/docs/amazon-aws-s3-bucket-takeover.md) - [AESI: ANSI Escape Sequence Injection](https://docs.brightsec.com/docs/ansi-escape-sequence-injection-aesi.md) - [Broken Access Control (BAC)](https://docs.brightsec.com/docs/broken-access-control.md) - [Broken JWT Authentication](https://docs.brightsec.com/docs/broken-jwt-authentication.md) - [Broken Object Property Authorization](https://docs.brightsec.com/docs/broken-object-property-authorization.md) - [Broken SAML Authentication](https://docs.brightsec.com/docs/broken-saml-authentication.md) - [Brute Force Login](https://docs.brightsec.com/docs/brute-force-login.md) - [Business Constraint Bypass](https://docs.brightsec.com/docs/business-constraint-bypass.md) - [Common Vulnerability Exposure (CVEs)](https://docs.brightsec.com/docs/cves.md) - [Cross-Site Request Forgery (CSRF)](https://docs.brightsec.com/docs/cross-site-request-forgery-csrf.md) - [Cross-Site Scripting (rXSS)](https://docs.brightsec.com/docs/cross-site-scripting-rxss.md) - [CSS Injection](https://docs.brightsec.com/docs/css-injection.md) - [Database Error Message Disclosure](https://docs.brightsec.com/docs/database-error-message-disclosure.md) - [Default Login Location](https://docs.brightsec.com/docs/default-login-location.md) - [Directory Listing](https://docs.brightsec.com/docs/directory-listing.md) - [Email Header Injection](https://docs.brightsec.com/docs/email-header-injection.md) - [EXIF Metadata Leakage](https://docs.brightsec.com/docs/exif-metadata-leakage.md) - [Excessive Data Exposure](https://docs.brightsec.com/docs/excessive-data-exposure.md) - [Exposed Common File](https://docs.brightsec.com/docs/exposed-common-file.md) - [Exposed Database Access](https://docs.brightsec.com/docs/exposed-database-access.md) - [Exposed Database Connection String](https://docs.brightsec.com/docs/exposed-database-connection-string.md) - [Full Path Disclosure](https://docs.brightsec.com/docs/full-path-disclosure.md) - [GraphQL Introspection](https://docs.brightsec.com/docs/graphql-introspection.md) - [HTML Injection](https://docs.brightsec.com/docs/html-injection.md) - [ID Enumeration](https://docs.brightsec.com/docs/id-enumeration.md) - [iFrame Injection (Cross-Frame Scripting)](https://docs.brightsec.com/docs/iframe-injection.md) - [Improper Assets Management](https://docs.brightsec.com/docs/improper-assets-management.md) - [Insecure HTTP Method](https://docs.brightsec.com/docs/insecure-http-method.md) - [Insecure Output Handling](https://docs.brightsec.com/docs/insecure-output-handling.md) - [Insecure TLS Configuration](https://docs.brightsec.com/docs/insecure-tls-configuration.md) - [JavaScript Component with Known Vulnerabilities](https://docs.brightsec.com/docs/javascript-component-with-known-vulnerabilities.md) - [Lack of Resources and Rate Limiting](https://docs.brightsec.com/docs/lack-of-resources-and-rate-limiting.md) - [LDAP Error](https://docs.brightsec.com/docs/ldap-error.md) - [Local File Inclusion (LFI)](https://docs.brightsec.com/docs/local-file-inclusion-lfi.md) - [MCP Lack of Session Invalidation](https://docs.brightsec.com/docs/mcp-lack-of-session-invalidation.md) - [MCP Predictable Session ID](https://docs.brightsec.com/docs/mcp-predictable-session-id.md) - [MCP Session ID as Authentication](https://docs.brightsec.com/docs/mcp-session-id-as-authentication.md) - [Misconfigured Security Headers](https://docs.brightsec.com/docs/misconfigured-security-headers.md) - [Missing 'httponly' Flag in Cookie](https://docs.brightsec.com/docs/missing-httponly-flag-in-cookie.md) - [Missing 'secure' Flag in Cookie](https://docs.brightsec.com/docs/missing-secure-flag-in-cookie.md) - [MongoDB Injection (NoSQLI injection)](https://docs.brightsec.com/docs/mongodb-nosqli.md) - [Open Cloud Storage](https://docs.brightsec.com/docs/open-cloud-storage.md) - [OS Command Injection](https://docs.brightsec.com/docs/os-command-injection.md) - [Predictable Cookie Value](https://docs.brightsec.com/docs/predictable-cookie-value.md) - [Prompt Injection](https://docs.brightsec.com/docs/prompt-injection.md) - [Prototype Pollution](https://docs.brightsec.com/docs/prototype-pollution.md) - [Remote File Inclusion (RFI)](https://docs.brightsec.com/docs/remote-file-inclusion-rfi.md) - [Secret Tokens Leak](https://docs.brightsec.com/docs/secret-tokens-leak.md) - [Server Side Request Forgery (SSRF)](https://docs.brightsec.com/docs/server-side-request-forgery-ssrf.md) - [Server Side Template Injection (SSTI)](https://docs.brightsec.com/docs/server-side-template-injection-ssti.md) - [SQL Injection](https://docs.brightsec.com/docs/sql-injection.md) - [Stored Cross-Site Scripting (pXSS)](https://docs.brightsec.com/docs/stored-cross-site-scripting-pxss.md) - [Stored AESI: ANSI Escape Sequence Injection](https://docs.brightsec.com/docs/stored-ansi-escape-sequence-injection-aesi.md) - [Unrestricted File Upload](https://docs.brightsec.com/docs/unrestricted-file-upload.md) - [Unvalidated Date Range](https://docs.brightsec.com/docs/unvalidated-date-range.md) - [Unvalidated Redirect](https://docs.brightsec.com/docs/unvalidated-redirect.md) - [Version Control System Exposure](https://docs.brightsec.com/docs/version-control-system-exposure.md) - [WordPress Component with Known Vulnerabilities](https://docs.brightsec.com/docs/wordpress-component-with-known-vulnerabilities.md) - [XML External Entity (XXE)](https://docs.brightsec.com/docs/xml-external-entity-xxe.md) - [XPath injection](https://docs.brightsec.com/docs/xpath-injection.md) - [FAQs](https://docs.brightsec.com/docs/faqs.md) ## Samples - [Bright CLI installation on Linux & MacOS](https://docs.brightsec.com/recipes/bright-cli-installation-on-linux-macos.md) ## Changelog - [Release of October 20, 2026](https://docs.brightsec.com/changelog/154.md) - [Release of September 22, 2026](https://docs.brightsec.com/changelog/152.md) - [Release of August 25, 2026](https://docs.brightsec.com/changelog/150.md) - [Release of August 11, 2026](https://docs.brightsec.com/changelog/release-of-august-11-2026.md) - [Release of July 28, 2026](https://docs.brightsec.com/changelog/release-of-july-28-2026.md) - [Release of June 29, 2026](https://docs.brightsec.com/changelog/release-of-june-29-2026.md) - [Release of June 16, 2026](https://docs.brightsec.com/changelog/release-of-june-16-2026.md) - [Release of June 2, 2026](https://docs.brightsec.com/changelog/release-of-june-2-2026.md) - [Release of May 5, 2026](https://docs.brightsec.com/changelog/release-of-may-5-2026.md) - [Release of April 7, 2026](https://docs.brightsec.com/changelog/release-of-april-7-2026.md)