Question 1

How to set up automatic email forwarding for 2FA or magic link enabled login?

Accepted Answer

How to set up automatic email forwarding in Gmail web?

Log into your Gmail account
Click on the show search option from the search box at the top
Enter your search criteria i.e., enter the criteria for the emails you want to forward. This could include specific senders (from address), subjects, keywords, or any other relevant information.
Click on "Search" to see which emails match your search criteria. This step ensures that your search is working correctly and captures the emails you want to forward.
Click on the “Advanced search” button and then proceed to click on "Create filter”. Select the option "Forward it to" to set up automatic forwarding.
After choosing the forwarding option, enter the email address to which you want to forward the emails and proceed to click create filter.

How to set up automatic email forwarding in Outlook web?

Upon opening your Outlook web application, click on Settings >> Email > > Rules and then click on Add new rule.
For each rule you should enter a name, at least 1 condition and an action. They are as follows: Name Give your rule a descriptive name for easy identification and editing after setup. Condition You should specify the reason for forwarding your email, which is setting condition for your email forwarding. Here, you can set multiple conditions for a single rule. "From”: for forwarding emails from a specific email to anot

Question 2

What if I want to delete my account?

Accepted Answer

f you wish to delete your Beagle Security account, you can raise a request by contacting our support team or through your account by navigating to Profile through the Profile badge and then clicking on Delete account.

Account deletion is a permanent action and will result in the loss of all associated data, including test results, applications and test reports.

Question 3

Where to find access token and application token?

Accepted Answer

Access tokens and application tokens in Beagle Security are used to authenticate and automate tasks through API integrations.

Access token: This token is linked to your user profile and is used for authenticating API requests across your account. It enables secure integration with external tools, CI/CD pipelines or custom scripts that interact with Beagle Security’s platform.
Application token: This token is specific to each application you’ve added in Beagle Security. It allows you to trigger tests and retrieve results programmatically for that particular application.

To create an access token:

Navigate to your Profile
Click on Personal Access Token
Click “New Personal Access Token” and provide a name and expiry date
Select the required permission scopes by toggling them on as needed
Click Create to generate the token
A popup titled “New Access Token” will appear on the screen, copy the token immediately, as it will only be shown once. Store it securely for future use

To generate an application token:

Go to the Applications section in your dashboard.
Select the specific application for which you want to generate a token
Click the three dots (⋮) next to the application name to view its details
In the application details view, click on the "Get Token" button (displayed with a key icon) under the Application Token label
Copy the token and store it securely for future use

Question 4

What all is covered in a security test?

Accepted Answer

Beagle Security offers an extensive suite of automated test cases designed to assess the security posture of websites, APIs and GraphQL endpoints. While it’s difficult to list every vulnerability due to the constantly evolving threat landscape, Beagle Security ensures broad and deep coverage across key vulnerability categories.

The platform’s security tests are structured around industry standards, particularly the OWASP Top 10, helping you quickly identify and prioritize critical issues like SQL Injection, Cross-Site Scripting (XSS), Broken Authentication, Security Misconfigurations, and Sensitive Data Exposure. This classification provides a clear understanding of risk severity and enables teams to focus on fixing high-impact issues first.

Each identified vulnerability comes with contextual insights, evidence, and remediation recommendations, empowering your developers to resolve issues effectively. The test results are also mapped to compliance standards such as OWASP, PCI DSS, HIPAA and making it easier for security and compliance teams to align with regulatory requirements.

With continuous updates and evolving test cases, Beagle Security helps ensure your applications remain secure against both known and emerging threats.

Question 5

How to do file verification?

Accepted Answer

3 methods using file verification:

Manual file upload

Download the verification file Use the provided “Download file” button to save the file to your local system.
Upload the file to your website’s root directory Place the file at the path shown on the screen (e.g., https://yourdomain.com/_.txt).
Verify accessibility Beagle Security will check if the file is accessible from the given URL. You can test this by visiting the link directly in your browser.
Click “Verify domain” Once the file is placed correctly, click the Verify domain button to complete the process. Once your domain is verified, you’ll be directed to the Beagle Security dashboard, where you can configure your test settings and start your first application security test.

Using command line

Copy command Copy the command provided in the directions in the side panel
Open terminal Open the command line on your Linux server and paste the string there (Note: You need superuser permission)
Execute command Execute the command to have the file generated in the root of your website directory
Verify domain Click on the Verify domain button to complete the domain verification process

Using WGET

Copy command Copy the command provided in the directions in the side panel.2
Open terminal Open the command line on your Linux server and paste the string there (Note: You need superuser permission)

Question 6

What are the API specifications of GraphQL and REST APIs?

Accepted Answer

The major difference between GraphQL and REST APIs is that, in GraphQL, the configuration is set for the queries, and in REST API, the configuration is set for the APIs.

Global authorization

What is an authorization?

Authorization is the process of restricting and permitting access to resources and allowing only certain users or user groups to conduct specific actions defined for them. This ensures that data is accessed securely by the client requests.

What is a global authorization?

Global authorization feature allows us to do the same, but it will be set across the individual application/API globally. Also, it is used to enable the authorization for the non-privileged users. Additionally, if another authorization (with or without a role) is enabled, that authorization will take precedence/priority. As an addon note, in global authorization, you can only choose one from any of the authorization types available.

Types of available authorization types

1. API key

An API key is an encrypted string which is used to authorize an application to access an API with no trustee/actual user. The application combines the key with each API requests and it is used to identify the application and to authorize the request. Also, how the key is sent differs with respect to the APIs. And the “keys” and its corresponding “values” are added to the “Header” and “Query Params” depending on the functionality.

2. Bearer token

Authenticatio

Frequently Read Articles

Browse All Categories