Demo Environment Argos Console preview: This is an interactive demo console. No real security scans are executed on this site. Request Live Pentest Demo →
Argos Logo ARGOS
Demo

Argos Console Dashboard

Argos Console

Everything Argos can do from the CLI, in one place — launch, watch, and review autonomous AI pentests.

Running now
0
Past runs
6
Scopes
3
Total findings
28
Burp / MCP
Connected
Quick Start
Launch a new assessment run using standard, quick, or deep scan presets.
Active Scopes
Allowed target boundaries
app.example-saas.com 18
billing.example-saas.com 2
demo.argos.sec/login 1
Severity breakdown
Findings on file, by severity.
28 TOTAL
High 2
Medium 20
Low 6
Recent Assessment Runs
Target Status Mode Started Action
https://app.example-saas.com Completed standard Today, 2:13 PM
api.cloud-infra.io/v2 Completed standard Today, 1:53 AM
https://auth.enterprise-portal.net Completed deep Yesterday, 3:46 PM

Launch Autonomous Assessment

Configure target URL, scope rules, and execution mode.

Authorization Notice
Demo Notice: This is a public demo console. No live network scans are executed on this preview site.
⚡

https://app.example-saas.com/

https://app.example-saas.com/ · Completed · deep

COMPLETED
Showing all agent reasoning events (long scan)...
11:52:29 PM API-Security-Specialist exec_command — completed

nuclei -version 2>&1 | head -5

find / -iname "*cognos*" -path "*nuclei-templates*" 2>/dev/null | head -20

ls -~/nuclei-templates 2>/dev/null | head -5 || find / -maxdepth 4 -iname "*nuclei-templates*" 2>/dev/null

11:52:11 PM API-Security-Specialist exec_command — completed

curl -sk -X HTTP://172.21.224.1:8080 https://app.example-saas.com/ --max-time 30 -o /tmp/home.html -w "HTTP:%{http_code} size:%{size_download}\n"

grep -oE "clientId[\"']?\s*:\s*[\"']?[a-zA-Z0-9_-]{10,}[\"']?" /tmp/home.html -i | sort -u

grep -oE "[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}" /tmp/home.html | sort -u | head -20

echo "---scripts---"

grep -oE "src=['\"]+.*\.js" /tmp/home.html | sort -u | head -30

11:50:04 PM Burp-Analysis-Lead intercept_proxy_traffic — completed

GET /api/v2/user/profile HTTP/1.1

Host: app.example-saas.com

Authorization: Bearer eyJhbGciOiJIUzI1Ni...

[200 OK] Response Header Analysis: X-Powered-By: Express | CSP: relaxed

11:48:15 PM Cognos-Exploitation-Specialist test_cve_exploit — completed

python3 exploits/cve_2024_auth_bypass.py --target https://app.example-saas.com --verify-poc

[+] Vulnerability Confirmed: Auth Bypass in /api/v2/admin/config (CVSS 8.8)

11:42:10 PM Tech-CVE-Analysis-Lead cve_matching — completed

cve-search --vendor express --product session --version 1.17.3

[CVE-2023-28121] IDOR vulnerability detected in session management layer.

Assessment Runs History

Review all 6 demo assessment runs on record.

Target Status Mode Started Action
https://app.example-saas.com Completed standard Today, 2:13 PM
api.cloud-infra.io/v2 Completed standard Today, 1:53 AM
https://auth.enterprise-portal.net Completed deep Yesterday, 3:46 PM

Findings & Verified PoCs

28 vulnerabilities identified across all target scopes.

High Broken Object Level Authorization (IDOR)

Unauthorized access to administrative user profiles via API parameter tampering.

app.example-saas.com
High Server-Side Request Forgery (SSRF)

Internal cloud metadata service exposed via image URL fetcher endpoint.

api.cloud-infra.io

Target Scopes & Boundaries

Configured target scope rules and domains.

https://app.example-saas.com/*Active Scope
https://api.cloud-infra.io/*Active Scope
https://auth.enterprise-portal.net/*Active Scope

LLM Configuration & Providers

Configure AI model providers, API keys, or self-hosted air-gapped runtimes.

Burp Suite / MCP Integration

Model Context Protocol integration for HTTP interception and tool execution.

MCP Server Active
MCP Server Endpoint: mcp://burp.argos.local:9876
Interception Proxy: Active

System Settings & Preferences

Argos console runtime configuration and user access controls.