Client workspaces
Dedicated client environments. Clear scope. Accountable security work.
Engagement control center
Your client portfolio
Manage assessment boundaries before connecting a scanner. Findings, evidence and remediation stay within the selected workspace.
0
Accessible workspaces
0
Active authorized scopes
0
Runners seen in last 5 minutes
Your client portfolio
Scanner readiness
No recent runner activity. Live scanning is not ready.
Deploy an outbound runner in the client network with its own local allowlist. An active scope alone does not install a scanner or start an assessment.
Runner installation guide
Use a dedicated Linux host in the approved client network. Install Python 3.12+, the project SDK and runner, and the required scanner binaries from their official sources.
python3 -m venv .venv . .venv/bin/activate pip install -e packages/sdk -e runners/security-runner
Set the following environment variables securely on that host. Use a private environment file or secret manager for the token.
BULWARK_API_URL=https://pentest.mag212.com BULWARK_RUNNER_TOKEN=<your runner token> BULWARK_RUNNER_ALLOWED_CIDRS=<approved ranges> BULWARK_RUNNER_ALLOWED_DOMAINS=<approved domains> BULWARK_RUNNER_PROHIBITED=<excluded targets>
Load those settings, then run bulwark-runner. Keep local allowlists restricted to the written engagement. Registering a token does not install or start the scanner.
Recorded scopes
No scopes recorded. Add a draft after reviewing the client’s authorization.