跳至範例稽核工作區

範例資料(英文)· 變更只會儲存在此瀏覽器中。

使用你的 Hi AUDIT 帳號 →
WebMCP ChallengeHuman + agent security triage

A shared triage room foryou and your security agent

Inspect evidence together, focus the live view, record triage decisions, and turn release blockers into a remediation plan— without making the agent guess its way through the interface.

Checking site toolsDetecting browser support

Try asking your agent

“Review the critical and high findings, triage the release blockers, then build a 14-day remediation plan.”

How site tools work
Critical

1

High

2

Medium

1

Low

1

Audit findings

5 of 5 visible

Sample scan · static snapshot
Severity
Status
Selected finding

SQL injection in order search

Critical · P0
HA-101CWE-89Injectionsrc/api/orders.ts:64

A request parameter is interpolated directly into a database query, allowing an attacker to alter the statement.

db.query("SELECT * FROM orders WHERE q = '" + search + "'")

Recommended fix

Replace string interpolation with a parameterized query and add an integration test using adversarial search input.

Quick triage
Remediation plan

Turn triage decisions into an executable plan

No plan yet

Ask your agent to prioritize the release blockers, or build a plan yourself from all unresolved findings.

Demo audit workspace ready.