Home
User Guide
Information that helps you to make the most out of Seeker for securing your applications
Working with Projects
Seeker uses projects to organize information and workflows.
View and Explore Application APIs
Seeker enables you to view and explore your application's API reference that is auto-generated from the API endpoints collected by the Agent for active inspection, or from a manually uploaded API specification file.

User Guide
Information that helps you to make the most out of Seeker for securing your applications
- Working with Vulnerabilities
  Seeker provides a rich set of tools to explore and handle security vulnerabilities detected in your applications.
- Working with Projects
  Seeker uses projects to organize information and workflows.
  - View Application Security for Regular Projects
    The Application Security dashboard provides an overview of the vulnerabilities detected in a regular project, the application's compliance with the security standards, and the results of third-party component analysis.
  - View Application Security for Composite Projects
    The Application Security dashboard provides an aggregated overview of the vulnerabilities detected in a composite project, which is convenient for assessing the security status of the whole application.
  - View Compliance Status
    In the Compliance dashboard, view the details of a project's compliance with the assigned policy and the major security standards: OWASP Top 10 2021, 2017, 2013; OWASP Top 10 API Security Risks 2023, 2019; PCI-DSS v3.2, CWE/SANS 2011, GDPR, CAPEC.
  - View Component Risk
    In the Component Risk dashboard, view the application risk reported by Software Composition Analysis (SCA), which scans for vulnerabilities the third-party and open-source components used in your application.
  - View and Explore Inbound Endpoint Risk
    In the Endpoint Risk dashboard, view and explore a distribution of application risk by inbound endpoints.
  - View and Explore Outbound Endpoint Risk
    In the Endpoint Risk dashboard, view and explore an application risk distribution by outbound endpoints.
  - View and Explore Application APIs
    Seeker enables you to view and explore your application's API reference that is auto-generated from the API endpoints collected by the Agent for active inspection, or from a manually uploaded API specification file.
  - View and Explore Code Risk
    In the Code Risk dashboard, view the application risk reported by rapid static scans of the source code.
  - View and Explore Data Flow Map
    In the Data Flow Map dashboard, explore your application's real-time interactions with other resources, such as databases and internal or external services.
- Working with Recommendations
  Seeker offers you various personalized recommendations to optimize your workflows and application testing by fine-tuning your system configuration.
- Configuring User Settings
  Personalize your experience with Seeker by configuring your user settings.

View and Explore Application APIs

Seeker enables you to view and explore your application's API reference that is auto-generated from the API endpoints collected by the Agent for active inspection, or from a manually uploaded API specification file.

Prerequisites: The Endpoint Discovery feature is enabled for your project. For instructions, see Configure Endpoint Discovery.

In the main menu, click (Projects) and open a project that you want to view.
Click Endpoint Risk > API specifications.
In the page that opens, choose an API specification file from the dropdown list.

Note: If the list is empty, browse your application to trigger API collection.
If you still don't see any API specifications or you want Seeker to use another specification file, manually upload it, as described in Configure API specification.
View and explore the displayed auto-generated API reference, expand any API and try it out interactively.