Welcome to WASViking
What WASViking is, what it covers, and how to find your way around these docs.
WASViking is a continuous exposure management and DAST platform for modern web applications, APIs, and software supply chains. These docs cover the platform in full: concepts, capabilities, how to run a scan, how to integrate with your stack, and how to operate the evidence the platform produces.
What you can do with WASViking
WASViking ships three answers to the security leader, in one console:
- See what you expose. External and internal DAST, modern protocol coverage (REST, OpenAPI, GraphQL, SOAP/WSDL, WebSocket, JWT), asset inventory with drift detection.
- Know what is in your software. Cloud-side component detection, premise-side SBOM, CI/CD SCA gate, signed Evidence Bundle, daily OSV and CISA KEV ingest.
- Operate the evidence. Findings workflow with Risk Score, SLA digest, Exploit Path Graph, Posture Shares, compliance mapping across five frameworks.
How these docs are organized
The sidebar follows the products you see in the portal, so you can go straight to what your plan includes.
- Getting Started takes a new organization from account creation to team setup and the checklist that activates each module.
- Security Products has one group per product: DAST, SAST, Mobile Assessment, SCA + SBOM + Secrets, CI/CD, Edge Threat Radar, Infrastructure Defense, Cloud Security, WASViking AI Guardian, Exposure Intelligence and the Sentinel agent. A group opens with the overview of the product and continues with its setup guides, in the order you would follow them.
- Platform covers what the products share: core concepts, administration, integrations, the API reference, compliance, the Partner Console and the security of the platform itself.
Where to start
If you are evaluating WASViking, start with Platform overview.
If you have an account and want to run your first scan, go to Your first scan. After that, Activate your modules walks through turning on everything your plan includes.
If you are integrating WASViking into a CI/CD pipeline, head to wasviking-sentinel in CI/CD.
How to give feedback
Email [email protected]. We read every message.