How Scantelio works
Connect a project, authorize testing, understand the results and verify fixes.
1. Connect
Sign in with GitHub and add your website or API URL. Import an OpenAPI schema for API routes or a dependency inventory for version matching. Sign-in does not grant repository access.
2. Verify and authorize
Prove control of each scan target using a DNS record or verification file, then authorize scanning. The server blocks scans without both steps. Active SQLi, XSS and CVE scenarios additionally require staging and separate scenario consent.
3. Run a check
Choose an available profile. The queue shows a wait estimate when enough current capacity data is available. Scans have request, time and scope limits. Authentication checks require dedicated test accounts and known objects with expected permissions.
4. Review and improve
Inspect findings, evidence, recommendations and coverage. Fix an issue, run a retest and compare releases. Enable supported schedules, dependency monitoring and Telegram alerts for continued visibility.