How it works
When you select Automatic Login Form authentication in the Website Scanner, the system uses a two-stage approach:Traditional detection
The scanner first attempts to identify login form elements (username field, password field, submit button) using pattern-based selectors. This method works well for standard login forms.
What AI handles
The AI component excels at scenarios that challenge traditional detection:Dynamic forms
Login forms loaded via JavaScript or AJAX
Iframes
Login forms embedded in iframes
Non-standard layouts
Forms with unusual element structures or naming
Multi-step logins
Login flows spread across multiple screens
Reliability
AI-enhanced authentication improves login reliability on complex pages where selector-based detection fails. It is a fallback inside the Automatic Login Form flow, so you do not need to enable a separate setting.Using AI authentication
Enabling automatic login form
Generated finding
When automatic authentication succeeds, the scan generates an informational finding:Authentication complete: Automatic method.
Each authentication method generates its own confirmation message. For example, the Recorded method displays: “Authentication complete: Recorded method.”
When AI is used
The AI component activates only when needed:- Standard forms: Traditional detection handles most login forms without AI
- Complex forms: AI activates automatically when traditional detection fails
- Transparent operation: You don’t need to configure anything. The system chooses the best approach
The scan result shows the same “Authentication complete: Automatic method” message regardless of whether AI was used. Both approaches are part of the Automatic Login Form method.
Other authentication methods
AI-enhanced detection is specific to the Automatic Login Form method. Other authentication methods work differently:| Method | How it works | Uses AI |
|---|---|---|
| Automatic Login Form | Detects and fills login form automatically | Yes (as fallback) |
| Recorded | Replays recorded login steps from Chrome DevTools | No |
| Cookie | Uses session cookies from an existing login | No |
| Header | Sends custom authentication headers | No |
AI data handling
Your authentication credentials are handled securely:- Azure OpenAI models: The AI agent uses Azure-hosted OpenAI models within our controlled infrastructure
- Secure processing: Credentials are processed within our isolated infrastructure
- No external training: Your data is not used to train any AI models
- No retention: Authentication data is not logged or retained after the scan completes