Supported tools
Website Scanner
When the normal login step fails on a complex or dynamic page, an AI agent steps in to complete the sign-in, so your authenticated scans keep running.
Password Auditor
When the login form can’t be found on a complex or dynamic page, an AI agent locates it so your password audits keep running.
Enabling AI-enhanced authentication
Both controls live together in the AI-enhanced authentication settings, under My account > AI.1
Open AI-enhanced authentication settings
Go to the AI-enhanced authentication section. You’ll see one toggle per tool.
2
Toggle the tool you want
Enable Website Scanner, Password Auditor, or both. Each toggle controls that tool only.
The toggles are independent. Turning AI on for one tool does not change the other.
Website Scanner
For the Website Scanner, AI-enhanced authentication backs both the Automatic Login Form and Recorded methods: if the usual approach can’t get through on a complex or dynamic page, an AI agent takes over and completes the sign-in.How it works
The Automatic Login Form and Recorded methods each run in two stages. The normal login runs first, and the AI agent only steps in if it fails.1
The normal login runs
For Automatic Login Form, the scanner finds the login form with pattern-based selectors. For Recorded, it replays the steps you recorded. Both handle standard logins well.
2
AI fallback
If the normal login fails, an AI agent takes over. It reads the page, identifies the right elements, and completes the sign-in, even on complex pages with iframes, dynamic loading, or non-standard layouts.
What AI handles
The AI component handles scenarios that the normal login methods struggle with:Dynamic forms
Login forms loaded via JavaScript or AJAX
Iframes
Login forms embedded in iframes
Non-standard layouts
Forms with unusual element structures or naming
Multi-step logins
Login flows spread across multiple screens
Reliability
AI-enhanced authentication raises login success rates on complex or dynamic pages, where selector matching or step replay would otherwise fail.Setting up automatic login form
1
Configure your scan
In the Website Scanner, add your target URL and configure scan options.
2
Enable authentication
Toggle Authentication to enable authenticated scanning.
3
Select Automatic Login Form
Choose Automatic Login Form as the authentication method.
4
Enter credentials
Provide the Login URL, Username, and Password for the application.
5
Verify authentication
Use Check authentication to confirm the login works before starting the scan.
The Recorded method uses the same AI fallback, with no extra setup. See Recorded authentication to set it up.
Generated finding
When automatic authentication succeeds, the scan generates an informational finding:Authentication complete: Automatic method.
Each authentication method generates its own confirmation message. For example, the Recorded method displays: “Authentication complete: Recorded method.”
When AI is used
The AI component activates only when needed:- Standard forms: Traditional detection handles most login forms without AI
- Complex forms: AI activates automatically when traditional detection fails
- Transparent operation: You don’t need to configure anything. The system chooses the best approach
The scan result shows the method you chose, for example “Authentication complete: Automatic method” or “Authentication complete: Recorded method”. It doesn’t indicate whether the AI fallback was used.
Authentication methods
The AI fallback backs the Automatic Login Form and Recorded methods. The remaining methods work differently:For both Automatic Login Form and Recorded, the AI agent only runs if the normal login fails. Cookie and Header authentication never use AI.
Password Auditor
The Password Auditor tests credentials across many service types. AI-enhanced authentication applies only to HTTP web-form logins. It helps the tool find and confirm web-form logins on pages where pattern-based detection struggles, so those audits keep running and report accurate results. This setting does not affect other service types.How it works
The Password Auditor keeps its existing heuristic and Selenium flow as the primary path. AI steps in on complex or dynamic pages.1
The normal detection runs
The Password Auditor locates the login form with pattern-based selectors and tests credentials through its standard flow.
2
AI locates the login form
When the form can’t be found on a complex or dynamic page, an AI agent reads the page and locates the login fields, so the audit can continue instead of stopping.
3
AI confirms the outcome
When a login attempt appears to succeed, AI confirms whether the page shows a genuine logged-in state or simply accepted any input, so pages that accept anything aren’t reported as valid credentials.
What AI handles
Forms selectors can't find
Login forms on complex or dynamic pages that pattern-based detection misses
Dynamic forms
Login forms loaded via JavaScript or AJAX
Non-standard layouts
Forms with unusual element structures or naming
Ambiguous responses
Pages that return a success response for any credentials, where a real and a failed login look nearly identical
When AI is used
AI-enhanced authentication covers only HTTP web-form logins. It does not apply to the Password Auditor’s other services (for example: SSH, FTP, RDP, or database logins).
- Normal detection first: Pattern-based detection handles most login forms without AI
- Form not found: AI activates on complex or dynamic pages where the login form can’t be located
- Outcome confirmation: AI confirms logins that appear to succeed, so false positives aren’t reported
- Safe fallback: If the AI step fails or times out, the normal outcome logic applies and the audit continues
AI does not replace pattern-based detection. It runs alongside it and only on complex pages or on logins that appear to succeed.