Vulnara/ Docs
Sign inStart free

Getting started

Run your first scan

From sign-up to your first security report in under 10 minutes. No configuration files, no proxy setup.

1

Create a free account

Go to vulnara.io/signup and create your account. No credit card required for the free plan.

You'll receive a verification email - click the link to activate your account.

2

Add and verify your domain

Vulnara only scans websites you own. Go to Settings → Domains and add your domain.

To verify ownership, Vulnara gives you a DNS TXT record to add to your domain's DNS settings. This usually takes 1–5 minutes to propagate.

Why verify? Vulnara actively tests your site for security weaknesses. We require proof of ownership so the tool can only be used on sites you control.
3

Create two test accounts on your site

For the most complete scan - especially checking if users can access each other's data - Vulnara needs two separate test accounts on your website.

Go to your own site and sign up twice using two different email addresses. Use throwaway emails if your site supports it.

Important: Use accounts you created specifically for testing. Never use real user accounts or real personal data.
4

Start a scan

Go to Scans → New scan.

  1. Select your verified domain (or paste the full URL)
  2. Enter your two test account credentials
  3. Choose which security checks to run - start with the defaults if unsure
  4. Click Launch scan

The scan takes between 2 and 15 minutes depending on how many checks you selected.

5

Read the report

When the scan finishes, go to Reports and click any finding to see the full details.

Each finding includes:

  • →What was found - in plain English
  • →Why it matters - the real-world impact
  • →How to fix it - step-by-step instructions for your developer
  • →How to reproduce it - exact steps to confirm the issue is real
NextBrowser extension