Get Started
Quickstart
Go from signup to your first verified finding: create an organization, add a target, run a scan, and read the results.
This guide takes you from a fresh account to your first verified finding. It should take about five minutes plus scan time.
TL;DR
Sign in, create an organization, add and verify a target you own, launch a scan with the Standard profile, then open the findings tab to triage. You must only scan assets you're authorized to test.
Before you start
Only scan systems you own or have explicit written authorization to test. Unauthorized scanning may be illegal. RedStrike requires target ownership verification before an external scan can run.
1. Create your organization
After signing in, you'll be prompted to create an organization — the top-level container for your targets, scans, findings, and teammates. Give it a name and invite teammates later from Settings → Members.
2. Add a target
Go to Targets → Add target and enter a domain, hostname, or IP range:
app.example.com
203.0.113.0/24
RedStrike asks you to prove ownership before scanning an external asset. The usual method is a DNS TXT record or a hosted verification file:
_redstrike-verify.app.example.com TXT "rs-verify=8f3c...e21"
Once the record resolves, the target flips to Verified.
3. Launch a scan
Open the target and click Run scan. Pick a profile:
| Profile | Best for | Intensity |
|---|---|---|
| Light | Quick discovery, low noise | Low |
| Standard | Most day-to-day scanning | Medium |
| Deep | Thorough pre-release testing | High |
Choose Standard for your first run and confirm. You'll see the scan move through phases — discovery, scanning, and verification — in real time.
4. Read your findings
When the scan completes, open the Findings tab. Each finding shows:
- A severity (Critical → Info) and a status (New, Verified, Dismissed).
- The affected asset and a plain-language description.
- Reproduction steps and evidence where the platform could confirm it.
- Remediation guidance.
Start with Verified Critical/High findings — those are confirmed and worth your attention first.
5. Next steps
- Connect a cloud account in Cloud Security.
- Learn how verification cuts false positives in Findings & Verification.
- Automate everything with the API.