Getting Started

1. Create an Account

Sign in at bgiya.security/login. Contact an admin to get an account.

2. Add Your Site

From the dashboard, click "Add Site" and enter your website URL. You'll need to verify ownership using one of three methods:

  • Meta Tag — Add a meta tag to your homepage
  • DNS TXT Record — Add a TXT record to your domain
  • File Upload — Upload a verification file to your server

3. Install the Snippet

Add the tracking snippet to your site's HTML. This enables real-time monitoring:

<script src="https://your-domain/api/snippet/YOUR_SITE_KEY" defer data-site-key="YOUR_SITE_KEY"></script>

4. Run a Scan

Once verified, you can trigger a manual security scan from the Scans tab. This checks SSL certificates, security headers, exposed files, DNS configuration, and more.

5. Set Up Alerts

Default alert rules are created automatically for each site. Customize them from the Settings tab. Available channels: email, Slack webhooks, Discord webhooks.

Server Agent (Enterprise)

For deep server monitoring and remediation, install the Bgiya agent:

npm install -g @bgiya/agent bgiya-agent init --token YOUR_AGENT_TOKEN

API Access

Create API keys from Dashboard > API Keys. Authenticate with the X-API-Key header:

curl -H "X-API-Key: bgiya_your_key" https://your-domain/api/v1/sites