# How AgentProof works

AgentProof is building recurring security checks and fixes for websites and web apps. The planned loop, from check to retest.

AgentProof is in development. This page describes the product we are building. The public preview on this site is a simulation and does not test your site.

## The short version

Most small teams ship fast and have nobody whose job is security. AgentProof gives them two agents that work on a schedule.

1. **The Attack Agent** looks for a way in and records what it finds.
2. **The Defense Agent** prepares a fix in your repository and checks it.
3. **The Attack Agent runs again** and tries the same thing. The finding closes only when the retest fails to get in.

Then the schedule repeats: monthly, weekly or daily, depending on your plan.

## What you connect

| You connect | Why |
|---|---|
| One website or web app | The target the agents check. |
| Your source repository | Where the Defense Agent writes fixes. |
| Email, Slack or the dashboard | Where findings reach your team. |

Repository providers and access details are still being decided. A website address alone does not give AgentProof access to your code or your deployment.

## What a finding contains

Each finding is a record your team can reproduce:

- what the Attack Agent tried
- the requests and responses that show it worked
- where in the app it happened
- the fix the Defense Agent proposes
- the retest result

Reports and evidence stay in your workspace for the life of the account. Removing a teammate does not delete shared history. Deleting the workspace does.

## How a fix ships

You choose how changes reach your app:

- **Pull request.** Your team reviews and merges.
- **Merge after checks.** The fix merges when your existing checks pass.
- **Direct application.** The fix is applied to the running app.

The default mode is not yet chosen.

## iOS apps

iOS testing is coming soon. It is not part of launch. The planned workflow takes an App Store link, downloads the app and tests it in the agent's own virtual machine.