Skip to main content
An authentication record stores the credentials and configuration a scan uses to log in to a target web application. Supplying one lets Kikimora run authenticated testing and find vulnerabilities that sit behind a login, which an unauthenticated scan never reaches.

​
Where auth records appear

Auth records surface in two workflows: Web application wizard, Scan Configuration step. When you create or edit a web application, step 3 has an Authentication Records dropdown. Select an existing record, or click Create to define one without leaving the wizard. Scan wizard, General Information step. When you configure a scan, the first step includes an auth record selector that determines which stored credentials the scanner uses for that scan.