# Security Testing Overview

{% hint style="success" %}
🔥 Pynt's API Security Testing is fully available for **Business plan users**, and limited for **Starter plan users** (up to 10 API endpoints) 🆓.
{% endhint %}

## How Does Pynt Work?

Pynt leverages an **integrated shift-left approach** and **unique hack technology** using home-grown attack scenarios to:

* Detect real vulnerabilities 🔍
* Discover APIs 📚
* Suggest fixes for verified vulnerabilities 🛠️

{% hint style="info" %}
Pynt acts like a hacker: It deeply analyses normal API traffic to build a model and then generates simulated attacks, verifies if the attack succeeds, and determines whether your API is vulnerable.
{% endhint %}

***

## Why Use Your Functional Tests?

Unlike other platforms (e.g., fuzzing), Pynt uses traffic from your functional tests to create real attack scenarios. This approach allows Pynt to:

* Perform tests with **no configuration**, running in minutes ⚡.
* Provide an **accurate overview of vulnerabilities** with **near-zero false positives** 🎯.
* Leverage functional tests for **maximum API coverage**, as tests evolve with your APIs 🔄.

<figure><img src="https://3462681674-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZKwBF6q0tAGXlIih38HL%2Fuploads%2FQD3hR92OtsMUunfbjPmO%2FPynt%20Overview%20on%20docs.png?alt=media&#x26;token=a6ae1273-4b5c-45c2-a778-7e8ed0465fa8" alt=""><figcaption><p>Pynt's testing flow</p></figcaption></figure>

## Getting Started

{% hint style="info" %}
🔗 **Get started with Pynt’s API Security Testing**: Pynt’s security engine goes beyond conventional measures, leveraging your existing API functional tests for proactive testing.
{% endhint %}

#### To get started quickly with Pynt, we recommend the following steps:

1. **Follow the** [**Prerequisites** ](https://docs.pynt.io/documentation/api-security-testing/prerequisites-for-running-pynt-scans)📋
2. **Run a single scan** - start directly from [here](https://www.pynt.io) or choose from the supported integrations [below](#available-integrations)🔍
3. **Integrate Pynt with your** [**CI/CD pipeline**](https://docs.pynt.io/documentation/security-testing-integrations/pynt-on-ci-cd) for continuous coverage 🔄&#x20;

***

### Available integrations&#x20;

Pynt leverages a sophisticated context-aware security engine that goes beyond conventional measures. By leveraging your existing tools and functional tests, it conducts proactive API security tests directly from your local machine:

* Get started with [**API testing tools**](https://docs.pynt.io/documentation/security-testing-integrations/pynt-with-api-testing-tools) 🛠️
* Get started with [**API testing CLIs**](https://docs.pynt.io/documentation/security-testing-integrations/pynt-with-api-testing-clis) 🖥️
* Get started with [**API testing frameworks**](https://docs.pynt.io/documentation/security-testing-integrations/pynt-with-testing-frameworks) ⚙️
* Get started with [**Burp Suite**](https://docs.pynt.io/documentation/security-testing-integrations/pynt-with-burp-suite) 🔍
* Get started with [**Browser testing**](https://docs.pynt.io/documentation/security-testing-integrations/pynt-with-browsers) 🌐

***

### Integrate API Security Testing Into Your CI/CD

{% hint style="success" %}
🔐 **Power of Continuous API Pentesting in CI/CD**: Integrating API security testing into your CI/CD pipeline ensures vulnerabilities are detected early in the development lifecycle.
{% endhint %}

We recommend to add Pynt into your CI/CD for continuous monitoring for API Security vulnerabilities. \
Pynt API security testing suite seamlessly integrates into existing development tools and CI/CD workflows.&#x20;

👉 [**Get started with integrating Pynt into your CI/CD**](https://docs.pynt.io/documentation/security-testing-integrations/pynt-on-ci-cd)**.**

<figure><img src="https://3462681674-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FZKwBF6q0tAGXlIih38HL%2Fuploads%2FIjkhr6K9F0EhyiazQtKC%2FRun%20a%20scan%20cicd.gif?alt=media&#x26;token=15946225-4ba0-42ee-bda6-862b61bf5108" alt=""><figcaption><p><a href="../security-testing-integrations/pynt-on-ci-cd/pynt-for-github-actions"><em>Github Actions example</em></a>:</p></figcaption></figure>