Unattended Works

Launching soon

Unattended Works · Private demo access

Private demo access

This page is not a signup. It is a keyhole. Without the admin code it does nothing at all, and with it, it starts exactly one audit run against a host the runner was already configured to visit.

Access
Admin code, held by the operator
Runs at a time
One
Download link
Valid for 7 days
Artifacts kept
30 days, then deleted

Private access

Start a demonstration run

Submitting this form is the only thing on this website that makes a network request to anywhere other than the page you are reading. It goes to https://api.unattendedworks.com, which is ours.

Must be one of the hosts this deployment was configured to audit. Anything else is refused before a job is created.

Sent once as a request header. Never stored by this page, and never written to a log by the API.

Idle. Nothing has been sent.

What this page does

You give it a URL and the admin code. The code is sent once, in a request header, to the first-party demo API named above. If the code is right and the URL is one of the hosts that deployment was configured to audit, a job is queued. The page then polls for its status until the run finishes, and shows a download link for the report package.

Nothing on this page is stored. The admin code lives in the field you typed it into for as long as the tab is open and is never written to a cookie, to localStorage, or to a log — not in your browser and not on the server, which compares it and forgets it.

What it will not do

It will not audit an arbitrary host. The set of auditable hosts is fixed at deployment and cannot be widened by anything sent from this page, because a demo that audits whatever it is told to is an open proxy with a password on it.

It will not run more than one audit at a time, and it will refuse new work when its small queue is full rather than accepting jobs it cannot get to.

It is not a purchase, an account, or a waitlist. There is nothing to sign up for on this page and no address is collected.

What you get back

The same package the product produces: a self-contained HTML report that opens with the network switched off, the same report as JSON, the sealed capture manifest, and every artifact the findings cite, with a SHA-256 for each. The download link stops working after seven days. The artifacts are deleted thirty days after the run.