FortPilot Pro Developer Guides

To initiate your first automated audit, navigate to your workspace dashboard and enter your target target FQDN.

# Example CLI launch via REST API
curl -X POST https://api.fortpilot.io/v1/scans \
  -H "Authorization: Bearer sec_live_99a8b7" \
  -d '{"target_url": "https://myapp.com"}'

Block vulnerable PRs automatically before merge by adding our action step to your `.github/workflows/security.yml`.

- name: Run FortPilot Audit
  uses: fortpilot/action-scan@v4
  with:
    api-token: ${{ secrets.FORTPILOT_TOKEN }}
    fail-on-severity: 'high'

Our engine evaluates against all 2026 OWASP injection vectors. Verified rules follow the official OWASP Top 10 Framework. Verified rules include:

Automatically push blocking IP rules to your Cloudflare edge firewall whenever malicious crawler probes are detected. Read about Cloudflare WAF capabilities.

Configure your webhook endpoint under **Settings ➔ Integrations** inside the dashboard.