---
title: "Test VAPT"
description: "Run vulnerability assessment and penetration tests and review risk-focused results."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.heizen.work/llms.txt
> Use this file to discover all available pages before exploring further.

# Test VAPT

**Test VAPT** is the project’s security testing surface. Use it to start an
authorized vulnerability assessment and penetration test, then review the risk
distribution and technical findings.

![Heizen Studio VAPT Security Testing page listing completed scans with their target URL and status, and the Start New Test action.](/images/heizen-studio/vapt.png)

## Start a test

Open **QA Agent → Test VAPT** and choose the action to launch a test. Confirm
that the target, scope, and timing are approved before starting. Studio may
enforce a cooldown between tests; wait for the existing test to finish rather
than launching duplicates.

## Review the result

Open a completed test to see:

- a summary of the test;
- risk distribution across High, Medium, Low, and Informational findings;
- technical insights such as response codes and endpoint metrics;
- finding descriptions, affected URLs, solutions, and references; and
- raw results when deeper investigation is needed.

Create or link a [ticket](/studio/delivery/tickets) for a finding that needs product
or engineering follow-up. Keep the original security result as evidence.

> **Only test systems you are authorized to test**
>
> VAPT and load checks can affect systems and produce sensitive output. Confirm
> ownership, scope, credentials, and the communication plan before running one.

Source: https://docs.heizen.work/studio/qa/vapt/index.mdx