Connect source code (White Box)

Connect a repository (GitHub, GitLab or Bitbucket) for a deeper pentest. Optional.

In a White Box pentest you connect a source-code repository and the analysis correlates the code with the live target's behavior, deepening coverage. It is fully optional — the pentest works normally without it.

You connect the repository under Company → Settings → Repositories, then select it in the source-code step when requesting a test.

Supported providers

GitHub, GitLab and Bitbucket (cloud). The connection uses each provider's official App/OAuth: you authorize through the provider itself, without pasting tokens into the platform.

How to connect

1. Connect: under Settings → Repositories → Connect repository, pick the provider and authorize read-only access.
2. Select: when requesting a test, check the repository in the source-code step.
3. Revoke anytime: the connection can be removed at any moment in settings.

Your code's privacy

Access is read-only. We do not store your source code: it is used only during test execution and discarded at the end. We keep only the connection link (so we can read the repository in future tests), which you can revoke at any time.

When to use it

It is ideal to deepen the test of an application you develop and whose code you have access to. If you don't have the source code (for example, testing a third-party system), just proceed with Black Box or Gray Box as usual.