Documentation

RedCapra is a local-first security audit workbench for penetration testers. It runs 44 bounded checks against web targets you own or are authorized to test, then generates client-ready reports.

Go to the workbench, enter a target URL, confirm you're authorized to test it, choose a scan preset (Quick Surface is a good start), and click Run RedCapra Scan. Results appear in the right panel.

By default, RedCapra is local-first — scan results stay in your browser. With a paid plan, you can enable cloud sync via Vercel KV for multi-device access and durable storage.

A fast, non-intrusive scan covering TLS, DNS, security headers, and exposure checks. Safe to run against any target. Takes about 30 seconds.

The most common preset for web app pentests. Adds CORS, XSS reflection, SQL signals, cookie analysis, CSP checks, and form auditing on top of Quick Surface.

Full-depth scan including injection checks (SSRF, path traversal, CRLF, SSTI, command injection), session analysis, and authenticated route discovery. Only use on targets where you have explicit written authorization.

Focused audit of DNS records (SPF, DMARC, DKIM, CAA, DNSSEC) and TLS configuration. No HTTP requests to the target.

Passive reconnaissance only — WAF detection, security.txt, CT logs, HTTP methods. Safe to show clients during initial scoping calls.

Read-only access-depth mapping. Discovers routes from the homepage, robots.txt, and sitemap, then maps which are public vs authenticated.

Full technical Markdown, client-safe Markdown (redacted evidence), JSON export, and report packs (all formats + retest scripts + rules of engagement).

Yes. Generate a shared report link with a token. Links expire after 14 days by default. Recipients don't need a RedCapra account.

A target you track across multiple scans. Add domains to your portfolio to compare findings over time, track remediation, and batch-scan groups.

Yes. Export your entire workspace as JSON from the workbench settings. Import it on another machine or share it with a colleague.

Unlimited local scans with all 44 checks. No cloud sync, no AI triage, no shared reports. Your data stays in your browser.

Cloud sync and backup, multi-device access, PDF/JSON export, and shared report links.

AI-assisted triage (Claude-powered), team workspaces with 3 seats, custom report templates, and priority support.

Unlimited seats, SSO/SAML authentication, audit log, and custom policy profiles for enterprise compliance.

Go to the billing portal via the workbench settings or visit /api/stripe/portal directly.