Modern Web & API
Security Testing

• Proxy

  Intercept and inspect HTTP/WebSocket traffic.

• Repeater

  Replay, modify, and iterate on requests.

• Scanner

  Discover vulnerabilities with automated and guided testing.

• Extensions

  Extend workflows with community and custom plugins.

• Projects

  Organize findings, sessions, and assessments.

PATCH /api/projects/42 HTTP/2
Host: app.acme.test
Authorization: Bearer eyJ...
Content-Type: application/json

{
  "owner_id": "usr_913",
  "role": "admin"
}

HTTP/2 200 OK
content-type: application/json
x-request-id: req_7f2

{
  "project_id": 42,
  "owner_id": "usr_913",
  "role": "admin"
}

Representative Arkium desktop workflow: proxy capture, request/response editing, repeater iterations, scanner findings, and project context in one assessment workspace.

• Proxy inspection

  Capture HTTP, HTTPS, and WebSocket traffic with precise scope controls and readable request history.

• Request replay

  Modify, resend, diff, and iterate on requests from a focused Repeater workflow.

• Automation workflows

  Automate repetitive checks, auth flows, fuzzing runs, and release regressions without hiding the underlying traffic.

• Project collaboration

  Share sessions, findings, evidence, and review context with pentest and AppSec teams.

• Extensible architecture

  Connect scanners, notifiers, custom checks, and internal tooling through community and private plugins.

• AI assistance

  Summarize responses, draft payload ideas, and suggest test cases while keeping the tester in control.