Source
OpenAPI and Postman
Import API definitions and collections to seed catalog coverage and testing workflows.
Integrations
Keep the tools you trust. Centralize the evidence trail.
CodeSec Cloud works with API sources, analyst tools, browser discovery, scanner orchestration, and provider-pluggable AI while keeping execution governed.
Connected workflow
Tools become evidence sources and controlled executors.
The product direction is to preserve traffic truth, scope boundaries, target validation, approvals, and reviewable artifacts rather than scattering them across tool silos.
HTTP truth
Burp Suite MCP
Use Burp for replay, traffic context, proxy history, and analyst-auditable HTTP evidence.
CodeSec Cloud
evidence trail
UI signal
BrowserOS MCP
Connect authenticated browser discovery to UI actions, snapshots, flows, and promoted API candidates.
Executor
Scanner orchestration
Run governed scanner profiles such as Nuclei jobs through target validation and execution tracking.
Planner
Multi-provider AI
Use provider-pluggable planning, summarization, and evidence workflows without exposing model authority to execute.
Review how your current toolchain fits.
Use the demo to test how Burp, browser discovery, imported specs, scanners, and AI planning connect around evidence.