> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.pensar.dev/features/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.pensar.dev/_mcp/server.

# Features

> Continuous, autonomous, on-demand penetration testing.

## Docs

- [Authentication](https://docs.pensar.dev/features/authentication.md): Configure authentication credentials for testing protected endpoints
- [Attack Surface](https://docs.pensar.dev/features/attack-surface.md): A living map of what an attacker could reach — and the guidance that steers how Pensar tests it
- [Workspace Objectives](https://docs.pensar.dev/features/workspace-objectives.md): Define custom pentesting objectives to extend testing beyond default OWASP coverage
- [Hybrid Testing Methodology](https://docs.pensar.dev/features/hybrid-testing-methodology.md): Hybrid pentesting combining source analysis with live exploitation for maximum coverage and precision
- [Auto-Remediation](https://docs.pensar.dev/features/auto-remediation.md): Automatically fix security vulnerabilities with AI-generated patches
- [CI/CD Integration](https://docs.pensar.dev/features/ci-cd-integration.md): Integrate Pensar pentesting into your CI/CD pipeline
- [Pentest Reports](https://docs.pensar.dev/features/pentest-reports.md): Comprehensive security reports for compliance and documentation
- [Rate Limiting](https://docs.pensar.dev/features/rate-limiting.md): Configure request rate limits for penetration testing
- [Custom Headers](https://docs.pensar.dev/features/custom-headers.md): Add custom HTTP headers to penetration testing requests
- [Billing & Usage](https://docs.pensar.dev/features/billing-usage.md): Understand how Pensar billing works across credits, one-time pentests, and usage tracking
- [REST API](https://docs.pensar.dev/features/rest-api.md): Programmatic access to Pensar pentests, issues, fixes, and attack surface
- [Webhooks](https://docs.pensar.dev/features/webhooks.md): Push findings to your systems the moment Pensar finds, updates, retests, or closes them
- [Bug Bounty Intake](https://docs.pensar.dev/features/bug-bounty-intake.md): Route bug bounty reports from email, HackerOne, and Bugcrowd into Pensar for automatic classification, reproduction, and reply