# Perfai Security

## Docs

- [Reference](https://docs.perfai.ai/docs/api/api-reference.md): Complete reference for the Perfai integration endpoints — register and list apps, trigger tests and vision runs, poll run status, and retrieve vulnerabilities.
- [Overview](https://docs.perfai.ai/docs/api/overview.md): Embed automated API security testing directly into your own tools — trigger tests, poll for results, and gate deployments on vulnerability findings.
- [Changelog](https://docs.perfai.ai/docs/changelog.md): New features, improvements, and fixes in Perfai Security.
- [Apps](https://docs.perfai.ai/docs/core-concepts/apps.md): The Apps page is your central hub for managing every application under test — tracking scan history, security posture, and savings across your entire portfolio.
- [Insights](https://docs.perfai.ai/docs/core-concepts/insights.md): Insights gives you a real-time security dashboard across every app in your portfolio — vulnerabilities, coverage, remediation velocity, and financial impact all in one view.
- [Integrations](https://docs.perfai.ai/docs/core-concepts/integrations.md): Connect Perfai to the tools your team already uses — communication, storage, and issue tracking — so security findings flow directly into your existing workflow.
- [Issues](https://docs.perfai.ai/docs/core-concepts/issues.md): The Issues page is your complete list of confirmed security vulnerabilities — triaged by severity, mapped to standards, and ready to action.
- [Reports](https://docs.perfai.ai/docs/core-concepts/reports.md): Reports gives you a full audit trail of every security and privacy scan Perfai has run — exportable, filterable, and ready to share with stakeholders.
- [Settings](https://docs.perfai.ai/docs/core-concepts/settings.md): Configure your Perfai organization — business details, agent behavior, model configuration, and app registration limits.
- [Users](https://docs.perfai.ai/docs/core-concepts/users.md): Manage who has access to your Perfai organization — invite team members, assign roles, and track service accounts all from one place.
- [Introduction](https://docs.perfai.ai/docs/introduction.md): Perfai Security autonomously detects broken access controls across every role, workflow, and API endpoint in your application — before attackers do.
- [Claude Code](https://docs.perfai.ai/docs/mcp/claude-code.md): Install and use the Perfai MCP server in Claude Code with a single CLI command.
- [Cursor](https://docs.perfai.ai/docs/mcp/cursor.md): Install and use the Perfai MCP server in Cursor — globally or scoped to a single project.
- [Generic MCP client](https://docs.perfai.ai/docs/mcp/generic.md): Use the Perfai MCP server with any client that supports stdio-based MCP servers.
- [Perfai MCP](https://docs.perfai.ai/docs/mcp/overview.md): Use Perfai security tools directly inside your AI coding assistant — Claude Code, Cursor, VS Code, Windsurf, Zed, or any MCP-compatible client.
- [VS Code (Copilot Agent Mode)](https://docs.perfai.ai/docs/mcp/vscode.md): Install and use the Perfai MCP server in VS Code with GitHub Copilot in Agent mode.
- [Windsurf](https://docs.perfai.ai/docs/mcp/windsurf.md): Install and use the Perfai MCP server in Windsurf — globally or scoped to a project.
- [Zed](https://docs.perfai.ai/docs/mcp/zed.md): Install and use the Perfai MCP server in the Zed editor via context_servers in settings.json.
- [Private Agents](https://docs.perfai.ai/docs/private-agents.md): Run Perfai's scanning agents inside your own Kubernetes cluster, connected outbound to your Perfai tenant — no inbound access, and no data at rest with Perfai.
- [Quickstart](https://docs.perfai.ai/docs/quickstart.md): Paste your app URL. Perfai does the rest — autonomous security testing in about 20 minutes.
- [Sample Security Report](https://docs.perfai.ai/docs/sample-security-report.md): A real Perfai security report — annotated section by section so you know exactly what to expect before your first scan completes.
- [Bring Your Own Accounts](https://docs.perfai.ai/docs/use-cases/bring-your-own-accounts.md): Already have two test accounts? Select Manual at the first prompt, enter your credentials, and Perfai starts mapping and testing immediately.
- [Internal App Support](https://docs.perfai.ai/docs/use-cases/internal-app-support.md): Perfai's agents run from the cloud and need a public URL. Use ngrok to create a secure reverse tunnel into apps running on localhost, a private network, or behind a firewall.
- [Managing an App](https://docs.perfai.ai/docs/use-cases/managing-an-app.md): Run agents on demand, adjust scan schedules, configure notifications, and delete an app — all from the Actions menu or by typing directly in the agent.
- [Apps Without Public Sign-Up](https://docs.perfai.ai/docs/use-cases/private-signup-apps.md): Perfai detects when it can't auto-create accounts and prompts you to supply two admin credentials — one per tenant — so security testing can proceed without any manual setup.

## Optional

- [Dashboard](https://cloud.perfai.ai)
- [Website](https://perfai.ai)