Studio user guide

Install Studio, create a project, and import your first API.

Passive vs. active rules, the findings list, the coverage matrix, sitemap & scope.

Trust the local CA, run the intercepting proxy, and capture WebSocket traffic.

Repeater, Comparer, Decoder, Sequencer, and Intruder.

Auth profiles, login macros, environments, match & replace, and role-diff.

The ASVS-lite checklist, and exporting findings as SARIF, JUnit, or git-friendly files.

Load your own WASM detection rules.

Encrypting secrets at rest, and the optional paid AI coach.