What you’ll enter
1
Application name
Whatever makes sense to your team. Something like Customer Portal (Prod) or Mobile API v2 works well. This is the name you’ll see in lists, reports, and scan history, so pick something you’ll recognize months from now.
2
Why do you need a pentest
A short dropdown on your reason for running this. Compliance, pre-launch sign-off, recurring security review, incident follow-up, that kind of thing. It’s a generic question, but your answer tells the agent where to bias coverage and what to emphasize in the report.
3
Environment
Which environment the agent will hit. Staging, pre-prod, or production. If you’re setting this up for the first time, pointing at staging is the safer call. Production is fine once you know what you’re getting, but go in with your team on alert.