Web Console ...
Invalid credentials
...
Dashboard
Session
History
Vulnerabilities
Settings
+ New Scan
🚀 New Scan Session ✕
Targets
Strict
Mode
Deep
Standard
Quick
Options
Max Running Sub-Agents
0 = unlimited (WAF mitigation)
Enable Exploitation
Attempt to exploit discovered vulnerabilities
Egress Rotation
Rotate IP at scan startup for WAF evasion
Custom Instructions
Dashboard
Total Sessions
—
Loading...
Vulnerabilities
—
Loading...
Active
—
No active scan
Targets
—
—
Recent Sessions View All →
Top Vulnerabilities By Severity
Loading...
Targets
LLM Services
No LLM activity yet
Vulnerabilities (0)
Agents
running 0 waiting 0 stopped 0 completed 0 queued 0 failed 0
🔍Discovery Models
💥Exploitation Models
⚡LLM Behavior
📦Sandbox
🧩Orchestration
🌐Egress Proxy
📊Telemetry
👥User Management
🔒Security

Discovery Stage

Recon · Specialist · Report
Round-robin pool for surface discovery, analysis, and reporting. Flash models recommended.
0 enabled
Model
API Key
Base URL

Exploitation Stage

Validate · Exploit · Deepen · CrossChain
Round-robin pool for vulnerability validation and exploitation. Pro models recommended.
0 enabled
Model
API Key
Base URL

LLM Behavior

Retries, timeouts, and reasoning depth for agent LLM calls.
Reasoning Effort
Higher = deeper thinking, more tokens
Max Retries
Per model, before failover to next
Timeout (s)
Single request timeout

Sandbox

Docker runtime for safe tool execution.
Execution Timeout (s)
Per tool call inside sandbox
Headless Browser
Run Chromium in sandbox

Orchestration

Agent spawning and concurrency limits.
Max Running Sub-Agents
0 = unlimited. Throttles concurrent sub-agents to mitigate WAF blocking.

Egress Proxy (91http)

Rotating IP pool for WAF/IP-ban evasion. Routes through Caido's upstream proxy.
Enable IP Pool
Enable when scans hit WAF blocks
91http Trade No
91http Secret
Egress Shared Secret
Protects the host rotation APIs (/api/egress/*); must match on host & container

Telemetry

Usage statistics and error reporting.
PostHog
Detailed error tracking

User Management

Admin only. Add, disable users and reset passwords.

Add User

Username
Password
Minimum 6 characters
Admin

Security

Change your own password.
Current Password
New Password
Minimum 6 characters
Confirm New Password