Nothing scanned yet
Cyfix is a workspace two actors share: a human who authorizes, and an agent that can do everything except authorize. Here is how a session goes.
1Name a target
Type a domain you own or are authorized to test. An agent can propose one for you with prepare_scan — but it can only propose.
2Approve it yourself
Nothing runs until you tick the authorization box. The gate lives inside the WebMCP tool, not just the UI, so an agent cannot route around it.
3Work the findings together
Passive checks only. Every finding comes with plain-language impact, a copy-paste fix, and a re-scan that proves the fix landed.
A finished sample scan, no network call — the fastest way to see the whole workspace.
Agent Console
0 tool(s) via document.modelContextThese are the exact WebMCP tools registered on document.modelContext. An AI agent embedded in the browser can call them directly — use the controls below to simulate that yourself.
Audit Log
0 event(s)Every human and agent action will appear here — nothing happens silently.