Security Test
Run focused WebMCP security tests to see how Surf protects what matters.
Then inspect results in Live Activity, Audit Trail, and Risk Reports.
Choose a test
Each test demonstrates a core Surf security capability.
Pick a test suite that matches the scenario you want to evaluate.
See how the tool responds without Surf protection.
Run the same tool with Surf enabled to see protection in action.
Save a detailed report with the findings and decision.
Each test resolves to one of four outcomes.
Action allowed — safe to proceed.
Sensitive information masked before output.
Action requires your approval to continue.
Action blocked by Surf policy.
Open Live Activity
Real-time WebMCP calls captured by the extension, across every protected tab.
Go to Live ActivityYour latest test reports and findings.
No reports yet — run a test above and generate one.