Support

How can we help?

Email support@avento.run with your question. If it is about a scan, include its scan ID or the website you checked and roughly when, so we can find it. Avento is made by Entropy Logic.

Getting started

• Quick Scan a live site. No account needed: use the Quick Scan on the home page, or ask ChatGPT, for example, “Quick Scan https://example.com with Avento.”
• Scan a project. To check a repository and its deployment together, create an Avento account (accounts are in early access), add a project with its repository and deployment, and run a Full Scan. In ChatGPT, link your Avento account when asked, then ask Avento to scan your project.
• Work locally. The open-source command-line tool and local MCP server run on your computer and send nothing to Avento unless you choose to upload a scan. The Quickstart has the steps.

Common questions

It says I have reached the Quick Scan limit

Quick Scans without an account are limited, currently to 5 every 10 minutes, with further limits per network and per website, so the service stays available for everyone. The message says how long to wait. Full Scans count toward your plan’s monthly allowance instead.

Why is nothing CONFIRMED?

A finding is CONFIRMED only when Avento sees the issue in the source code and reproduces it on the live deployment. A Quick Scan sees only the live site, so its findings are OBSERVED at most. Add a project with its repository and deployment, and run a Full Scan.

Some checks were skipped

Every report lists the checks that did not run, and why. Full Scans run active checks only on domains you have verified in Avento; other targets get passive checks. Aggressive checks are off unless you turn them on. A scan with skipped checks is incomplete: no findings there is not a clean result.

A website could not be scanned

Avento scans public websites. A scan can fail when the site is offline or slow, blocks automated visitors, requires a sign-in, resolves to a private network address (Avento refuses those), or its owner has opted out. The report explains which happened.

I own a website and do not want it scanned

Add this to your site’s robots.txt. Avento’s scanner identifies itself as Tracer, its technical name:

User-agent: Tracer
Disallow: /

Rules for all crawlers (User-agent: *) do not opt a site out, because a scan is a one-off check requested by a person rather than crawling. You can also email support@avento.run to have your domain excluded.

A finding looks wrong

Each finding shows the evidence behind it. If it still looks wrong, email us the scan ID and the finding, and we will look into it.

Disconnecting ChatGPT or another app

Remove Avento in the app’s own settings. To have us revoke an app’s access to your account as well, email us from the address on the account.

Billing and deleting your account

Plans are managed on the Account page of the Avento dashboard, which opens Stripe’s billing portal. You can delete your account on the same page: cancel any paid subscription first, and if others share a workspace you own, make one of them an owner.

Reporting a security issue in Avento

Email support@avento.run with “Security” in the subject. Please do not access other people’s data or disrupt the service while testing.

What happens to my data?

The privacy policy explains what Avento processes, and the terms cover use of the service.