The AI-enhanced authentication feature improves the reliability of automatic login form detection in the Website Scanner. AI helps complete logins on complex or dynamic pages where traditional detection methods struggle.Documentation Index
Fetch the complete documentation index at: https://pentest-tools.com/docs/llms.txt
Use this file to discover all available pages before exploring further.
How it works
When you select Automatic Login Form authentication in the Website Scanner, the system uses a two-stage approach:Traditional detection
The scanner first attempts to identify login form elements (username field, password field, submit button) using pattern-based selectors. This method works well for standard login forms.
What AI handles
The AI component excels at scenarios that challenge traditional detection:Dynamic forms
Login forms loaded via JavaScript or AJAX
Iframes
Login forms embedded in iframes
Non-standard layouts
Forms with unusual element structures or naming
Multi-step logins
Login flows spread across multiple screens
Reliability
AI-enhanced authentication improves login reliability on complex pages where selector-based detection fails. It is a fallback inside the Automatic Login Form flow, so you do not need to enable a separate setting.Using AI authentication
Enabling automatic login form
Generated finding
When automatic authentication succeeds, the scan generates an informational finding:Authentication complete: Automatic method.
Each authentication method generates its own confirmation message. For example, the Recorded method displays: “Authentication complete: Recorded method.”
When AI is used
The AI component activates only when needed:- Standard forms: Traditional detection handles most login forms without AI
- Complex forms: AI activates automatically when traditional detection fails
- Transparent operation: You don’t need to configure anything. The system chooses the best approach
The scan result shows the same “Authentication complete: Automatic method” message regardless of whether AI was used. Both approaches are part of the Automatic Login Form method.
Other authentication methods
AI-enhanced detection is specific to the Automatic Login Form method. Other authentication methods work differently:| Method | How it works | Uses AI |
|---|---|---|
| Automatic Login Form | Detects and fills login form automatically | Yes (as fallback) |
| Recorded | Replays recorded login steps from Chrome DevTools | No |
| Cookie | Uses session cookies from an existing login | No |
| Header | Sends custom authentication headers | No |
AI data handling
Your authentication credentials are handled securely:- Azure OpenAI models: The AI agent uses Azure-hosted OpenAI models within our controlled infrastructure
- Secure processing: Credentials are processed within our isolated infrastructure
- No external training: Your data is not used to train any AI models
- No retention: Authentication data is not logged or retained after the scan completes