API tokens
Long-lived JWTs scope automation and the bench agent, managed and revocable in the dashboard.
Automation
Security tests on every build, not once a year.
A security test that runs once, during an audit, tells you about the ECU you had six months ago. AutoST plugs into your pipeline so every build is checked.
In short
AutoST automates ECU security testing through long-lived API tokens (JWTs) and a REST API. A CI plugin triggers an enumeration scan, polls for the result, fails the build when findings exceed your threshold, and emits JSON, JUnit XML and a PDF report. Any CI system (Jenkins, GitLab CI, GitHub Actions) can drive AutoST through the same API; a ready-made plugin is provided for Bamboo.
How it hooks in
Tokens, a plugin and an API
CI plugin
Triggers a scan, polls for completion, fails the build on findings and emits JSON, JUnit XML and PDF. Ready for Bamboo.
REST API
Everything the UI does is in the API, so Jenkins, GitLab CI or GitHub Actions can drive AutoST the same way.
A gate, not a report
Break the build before it ships
Set a threshold and AutoST fails the pipeline when an ECU regresses past it, so a new weakness is caught the moment it is introduced, not during the next audit.
The JUnit XML output shows up in your build results like any test suite, and the PDF is filed automatically as evidence for every run.
- Fail the build on a risk threshold
- JUnit XML in your build results
- A PDF evidence trail per run
- Reproducible, token-driven scans
FAQ
Frequently asked questions
Which CI systems are supported?
Any of them. A ready-made plugin exists for Bamboo, and every other system (Jenkins, GitLab CI, GitHub Actions) can drive AutoST through its REST API and API tokens.
Can a scan fail the build?
Yes. The CI integration fails the build when findings exceed the threshold you set, and emits JSON, JUnit XML and a PDF.
See it on your ECU
Wire AutoST into your pipeline
Bring your CI setup and your ECU bench. In an hour we map out how AutoST fits your build.
- Works with any CI through the REST API
- API tokens and a ready Bamboo plugin
- Fail builds on a risk threshold you set
Your demo is withTom ZaubermannFounder of Zyberum, ex-lead of the VW InCar Security Testing Lab
Already trusted by Tier 1, Tier 2 suppliers and OEMs. References on request.
Or send us a message
We reply within one business day.