New to Scryn? This guide walks you through running your first security scan from start to finish. By the end, you'll have added a target, run a scan, and know how to read the results.
1. Sign up and sign in
Create an account at Scryn if you haven't already, then sign in. You'll land on the dashboard—your home base for targets, scans, and results.
2. Add your first target
A target is the website or API you want Scryn to test. To add one, go to Config → Target URLs, then click to add a new target URL. Enter the URL of your application—for example, your staging site or a public API—and optionally give it a name and description. You can add more targets later; for now, one is enough to run your first scan.
3. Run a scan
With a target in place, start a scan from Scans → New scan. Choose the target you just added and pick a scan type—for example, a baseline scan for a quick first run, or a full scan for deeper testing. Launch the scan; Scryn will run the checks and update the status as it progresses. You can also schedule scans or trigger them via the API when you're ready to automate.
4. Understand the results
When the scan completes, open it to see the findings. Each finding has a risk level (High, Medium, or Low) and details like the affected URL and how to fix it. Prioritize High and Medium items first. If a finding is a known safe case—for example, a test endpoint or an accepted risk—you can mark it as a false positive so it doesn't clutter future scans. The security score and trend on the target page give you a quick view of how you're doing over time.
What's next?
You've added your first target, run a scan, and reviewed the results. From here, you can add more targets, set up authentication to scan areas behind login, schedule recurring scans, or use the API to fit Scryn into your pipeline. We've also written a thorough guide on what DAST is and when to use it—so you can get even more out of your scans.