Uxarion
Authorized targets onlyLocal runner requiredReplayable evidence

AI pentesting that shows every step, artifact, and decision.

Uxarion pairs a local runner with guided workflows so teams can validate auth flows, replay reports, and export a cleaner evidence pack without guessing what happened.

Windows and Linux are available now. macOS packaging is still in progress.
Start here
01
Install the runner
Keep browser, HTTP, and CLI artifacts on the same machine that executes the workflow.
02
Connect the workspace
Create the project, define scope, and make the next safe action obvious before execution starts.
03
Launch a scoped run
Capture a narrow workflow first, then review the transcript, traces, screenshots, and export pack together.
Scoped workflows
Browser + HTTP + CLI artifacts
Evidence pack exports
Safer newcomer flow
Operator canvas
Scoped run
Proof before handoff

Reproduce the path, capture the impact, and hand over one clean evidence pack.

Replay the reported flow against a scoped target, keep every artifact in one timeline, and export a package that is easy to review.

Target
https://staging.example.com/account/reset
Evidence retained
01
Step 1
Replay the reported path with the local browser runner
02
Step 2
Capture screenshots at the auth boundary and impact point
03
Step 3
Attach HTTP traces and a concise severity recommendation
Artifacts captured
3 screenshots
2 HTTP traces
1 replay transcript
Export pack
Summary drafted
Reproduction steps attached
Bundle ready for review
Newcomer path
1Install runner
2Connect workspace
3Launch scoped run
Workflow

One path from first install to the first useful report.

Workflow

Scope before execution

Declare allowed targets, out-of-scope paths, and approval requirements before any automation starts.

Workflow

Local runner for proof

Keep the browser session, HTTP traces, and CLI output tied to the same run instead of scattering them across tools.

Workflow

Evidence that is ready to hand off

Review findings inside one timeline and export a pack your team can replay, validate, and share.

Evidence

Artifacts stay connected from run start to export.

Evidence pack
What ships from a run
Review ready
Pack contents
Screenshot timeline
HTTP traces and request notes
Replay transcript
Run summary and export metadata
Review flow
Scope checked before launch.
Artifacts tied to one workflow.
Export pack ready for another reviewer.
Why it matters
The value is not “AI” in the abstract. The value is a workflow that leaves a reviewer with enough proof to understand what happened and what to do next.
Proof

Run state stays visible

The operator sees runner status, current project, and scope posture before the run starts.

Proof

Artifacts stay connected

Screenshots, traces, and transcript events stay attached to the same workflow instead of becoming loose files.

Proof

Exports are reviewable

A clean bundle makes it easier to triage a report, confirm a regression, or hand findings to another reviewer.

Use cases

Start narrow, prove value, then expand the workflow.

Starter path

Bug bounty validation

Reproduce a report, keep the proof chain intact, and export one package for triage or retest.

Replay transcript, screenshots, severity draft
Starter path

Post-deploy regression

Run a narrow release checklist against critical flows and compare new artifacts with the previous baseline.

Checklist result, diff summary, retained artifacts
Starter path

Auth flow starter run

Guide a newcomer into a safe first workflow that explains the product through a real result instead of an empty dashboard.

Scope approval, starter transcript, next run template
Guides

Helpful pages for the exact security workflow questions teams search before they buy.

Search intent

AI pentesting workflow guide

How to scope a run, connect the local runner, and keep evidence useful from the first workflow.

Search intent

Bug bounty triage workflow

A practical playbook for reproducing reports, checking authorization boundaries, and exporting proof.

Search intent

Security regression testing

What to retest after deploys when auth, routing, and response shape can drift under release pressure.

Start here

The homepage should make the next action obvious.

Guided setup

Install the runner, connect the workspace, launch the first scoped run.

That is the shortest path from curiosity to a real artifact bundle. No surprise redirect. No empty dashboard. No vague next step.