# Security Test

The **Security Test** module in TestWheel enables users to perform security testing for Web Applications and REST APIs. This module helps identify security vulnerabilities, detect potential threats, and improve application security by validating application behavior against common security risks.

Security testing is an important process that helps protect sensitive data, enforce secure access controls, and maintain reliable application functionality. By identifying vulnerabilities early, organizations can improve security compliance and reduce security-related risks

### Accessing the Security Test Module

To start security testing, navigate to the **Dashboard** and select the **Security Test** icon from the side navigation menu. Clicking the icon redirects users to the Security Test page.

<figure><img src="/files/Hz0mx1MXJV89NE0N1vn2" alt=""><figcaption></figcaption></figure>

## Select Application

Before creating a security scan in TestWheel, users must select an application from the **Application Dropdown**. The selected application can be either a **Web Application** or a **REST API Application**, depending on the type of security testing required. Selecting the appropriate application allows users to configure and execute security scans for the target application environment effectively.

<figure><img src="/files/9XSoTybnMfDy05nmmnBi" alt=""><figcaption></figcaption></figure>

## &#x20;Adding Scan Data

After selecting an application, users can create a new scan configuration by clicking the **Add Scan Data** button. The Add Scan Data page allows users to configure the required scan details for the security test.

<figure><img src="/files/XZo4uy4ypGnZpEht1q06" alt=""><figcaption></figcaption></figure>

### Target URL Configuration

Users must provide the **Target URL**, which represents the base URL of the application that will be scanned during the security testing process.

**Important:** Ensure that the Target URL is valid and accessible before starting the scan.

<figure><img src="/files/5wYrGQleDbNvgtVetyYr" alt=""><figcaption></figcaption></figure>

After entering the required details, click **Save** to store the scan configuration successfully.

### Managing Scan Configuration

After the scan configuration is saved, the TestWheel Security Test dashboard displays the configured scan entry along with its details. From this page, users can manage the saved security scan configuration efficiently.

Users can perform the following actions:

* **Edit Scan Data** to modify the existing scan configuration
* **Start Scan** to initiate the security testing process

<figure><img src="/files/ze8zrvAIuxuearoeycIe" alt=""><figcaption></figcaption></figure>

### Authenticated Scan

If the application requires user authentication, users must enable the **Authenticated Scan** option  in TestWheel. Once the option is enabled, users are required to provide the **Login URL**, **Username**, and **Password** to allow the security scan to access authenticated areas of the application.

<figure><img src="/files/RHP5V1LWeH3gPdYY9tzs" alt=""><figcaption></figcaption></figure>

After entering the required authentication details, click the **Save** button to securely store the scan configuration.

**Important:** The provided login credentials must be valid; otherwise, the authenticated security scan may fail.

### Start Security Scan

Once the scan configuration is completed, users can click the **Start Scan** button to initiate the security testing process in TestWheel. During execution, the platform scans the selected application for **potential security vulnerabilities** based on the configured scan settings and authentication details. After the scan is completed, TestWheel generates **security testing results** that help users analyze vulnerabilities, review security findings, and improve overall application security.

<figure><img src="/files/pLMTBVwfMeFthrZnAU7l" alt=""><figcaption></figcaption></figure>

### Security Test Results

After the security scan is completed, users can review the generated **Security Test** **Results** directly from the TestWheel platform. The **Test Result page** displays **detected vulnerabilities, scan findings,** and **security-related information** identified during the testing process. These results help users analyze application security issues, track vulnerabilities efficiently, and improve the overall security of **Web Applications** and **REST APIs.**

<figure><img src="/files/YKTrwglK3tWrCRugyaaD" alt=""><figcaption></figcaption></figure>

Users can click the **Report icon** available in the Test Summary section to view and download the detailed **Security Test Report** for the completed scan.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.testwheel.com/security-test.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
