---
title: ToolRouter — Agent Use Case Guide
description: Step-by-step guide for completing a task with a specific AI agent using ToolRouter.
url: https://toolrouter.com/tools/pentest/use-cases/scan-web-app-vulnerabilities/claude
---
# How to Scan Web App Vulnerabilities with Claude

Claude transforms penetration testing into a conversational security review where each discovered vulnerability leads to deeper investigation. Ask Claude to scan your application, explain each finding in context, chain additional targeted tests based on initial results, and generate remediation code for every issue found. Its analytical depth is ideal for security-conscious developers who want to understand not just what is vulnerable but why and how to fix it permanently.

## Setup

claude mcp add toolrouter -- npx -y toolrouter-mcp

## Steps

1. Connect ToolRouter: claude mcp add toolrouter -- npx -y toolrouter-mcp
2. Ask Claude: "Scan this web application for vulnerabilities using pentest" and provide the target URL
3. Claude runs scan_vulnerabilities and returns a detailed findings report
4. Review each vulnerability by severity and exploitability
5. Prioritize fixes starting with critical and high-severity issues

## Example Prompt

```
Scan https://staging.myapp.com for security vulnerabilities. Check for injection flaws, authentication issues, and misconfigurations. Give me a prioritized report.
```

## Tips

- Always scan staging environments rather than production to avoid disruption
- Ask Claude to explain each vulnerability and suggest specific remediation steps
- Run scans after every major feature deployment to catch new vulnerabilities early
