Question 1

How to set up automatic email forwarding for 2FA or magic link enabled login?

Accepted Answer

How to set up automatic email forwarding in Gmail web?

Log into your Gmail account
Click on the show search option from the search box at the top
Enter your search criteria i.e., enter the criteria for the emails you want to forward. This could include specific senders (from address), subjects, keywords, or any other relevant information.
Click on "Search" to see which emails match your search criteria. This step ensures that your search is working correctly and captures the emails you want to forward.
Click on the “Advanced search” button and then proceed to click on "Create filter”. Select the option "Forward it to" to set up automatic forwarding.
After choosing the forwarding option, enter the email address to which you want to forward the emails and proceed to click create filter.

How to set up automatic email forwarding in Outlook web?

Upon opening your Outlook web application, click on Settings >> Email > > Rules and then click on Add new rule.
For each rule you should enter a name, at least 1 condition and an action. They are as follows: Name Give your rule a descriptive name for easy identification and editing after setup. Condition You should specify the reason for forwarding your email, which is setting condition for your email forwarding. Here, you can set multiple conditions for a single rule. "From”: for forwarding emails from a specific email to anot

Question 2

Where to find access token and application token?

Accepted Answer

Access tokens and application tokens in Beagle Security are used to authenticate and automate tasks through API integrations.

Access token: This token is linked to your user profile and is used for authenticating API requests across your account. It enables secure integration with external tools, CI/CD pipelines or custom scripts that interact with Beagle Security’s platform.
Application token: This token is specific to each application you’ve added in Beagle Security. It allows you to trigger tests and retrieve results programmatically for that particular application.

To create an access token:

Navigate to your Profile
Click on Personal Access Token
Click “New Personal Access Token” and provide a name and expiry date
Select the required permission scopes by toggling them on as needed
Click Create to generate the token
A popup titled “New Access Token” will appear on the screen, copy the token immediately, as it will only be shown once. Store it securely for future use

To generate an application token:

Go to the Applications section in your dashboard.
Select the specific application for which you want to generate a token
Click the three dots (⋮) next to the application name to view its details
In the application details view, click on the "Get Token" button (displayed with a key icon) under the Application Token label
Copy the token and store it securely for future use

Question 3

What all is covered in a security test?

Accepted Answer

Beagle Security offers an extensive suite of automated test cases designed to assess the security posture of websites, APIs and GraphQL endpoints. While it’s difficult to list every vulnerability due to the constantly evolving threat landscape, Beagle Security ensures broad and deep coverage across key vulnerability categories.

The platform’s security tests are structured around industry standards, particularly the OWASP Top 10, helping you quickly identify and prioritize critical issues like SQL Injection, Cross-Site Scripting (XSS), Broken Authentication, Security Misconfigurations, and Sensitive Data Exposure. This classification provides a clear understanding of risk severity and enables teams to focus on fixing high-impact issues first.

Each identified vulnerability comes with contextual insights, evidence, and remediation recommendations, empowering your developers to resolve issues effectively. The test results are also mapped to compliance standards such as OWASP, PCI DSS, HIPAA and making it easier for security and compliance teams to align with regulatory requirements.

With continuous updates and evolving test cases, Beagle Security helps ensure your applications remain secure against both known and emerging threats.

Question 4

How to set up authenticated testing in Beagle Security using login form method?

Accepted Answer

To ensure comprehensive security coverage for all webpages of your application, especially those behind a login screen, Beagle Security offers four methods to set up and run authenticated tests. These methods are designed to address various authentication scenarios, providing you with the flexibility to choose the best fit for your application. Available authentication methods:

Login form authentication
Recorded login
Sign up
Third-party login In this help article, we will focus on login form authentication method for authenticated testing. Steps to set up login form authentication

Select the application you want to run a test on. From within the Configurations tab, select “Test credentials” under Basic section.
Click the “Enable test credentials” toggle button to turn it on.
Select Login from the drop-down list.
Provide the login URL, role of the user, username and password in the designated fields. Click on Save button to complete the configuration.
Click “Set as active” near the drop-down list to activate this method. Note: Do not use the login credentials of an admin account. It is advised to create a separate user account specifically for the automated penetration testing purpose on Beagle Security.

Question 5

What all can I security test using Beagle Security?

Accepted Answer

Beagle Security allows you to perform automated security testing on a wide range of digital assets including web applications, REST APIs, GraphQL endpoints and WordPress sites.

For web applications, it simulates real-world attack scenarios to identify vulnerabilities including those in the OWASP Top 10, misconfigurations and several other security flaws.

REST APIs are tested for critical issues such as injection attacks and broken authentication. It also supports testing GraphQL endpoints. WordPress sites can be tested through a dedicated plugin

Additionally, Beagle Security supports authenticated scans using a browser extension and offers seamless integration with CI/CD tools like GitLab, Jenkins and Azure DevOps enabling shift-left security testing throughout your development lifecycle.

Question 6

What are the API specifications of GraphQL and REST APIs?

Accepted Answer

The major difference between GraphQL and REST APIs is that, in GraphQL, the configuration is set for the queries, and in REST API, the configuration is set for the APIs.

Global authorization

What is an authorization?

Authorization is the process of restricting and permitting access to resources and allowing only certain users or user groups to conduct specific actions defined for them. This ensures that data is accessed securely by the client requests.

What is a global authorization?

Global authorization feature allows us to do the same, but it will be set across the individual application/API globally. Also, it is used to enable the authorization for the non-privileged users. Additionally, if another authorization (with or without a role) is enabled, that authorization will take precedence/priority. As an addon note, in global authorization, you can only choose one from any of the authorization types available.

Types of available authorization types

1. API key

An API key is an encrypted string which is used to authorize an application to access an API with no trustee/actual user. The application combines the key with each API requests and it is used to identify the application and to authorize the request. Also, how the key is sent differs with respect to the APIs. And the “keys” and its corresponding “values” are added to the “Header” and “Query Params” depending on the functionality.

2. Bearer token

Authenticatio

Frequently Read Articles

Browse All Categories