# Start here



Run security tools from your code or agent, then use their results.

 

Pick the check you need to perform. Send the tool your files and command-line arguments, then download its report. Start with a working example and adapt it to your own inputs.

 

- [Scan your first file](https://www.security.run/docs/quickstart.html) — Run a YARA rule against a file and read the matched rule.



- [Connect your agent](https://www.security.run/docs/mcp.html) — Add Security.Run to an MCP client and give it a first task.



- [Find the right tool](https://www.security.run/docs/tools.html) — Choose from 66 tools, each with an example you can run.



- [Get a report or output file](https://www.security.run/docs/visibility.html) — Check completion, download results, and verify the bytes.

 

## Your first successful run



1. **Set your API URL and token**
   
   Use the execution endpoint and credential supplied by your operator. The URL of this docs site is not an API endpoint.

2. **Run the quickstart**
   
   The example creates its own rule and sample, uploads both, and runs YARA.

3. **Check the output**
   
   You should see the rule name `example` in YARA’s output and `destroyed` for cleanup.

4. **Use your own files**
   
   Change the inputs and arguments, or download an example from another tool’s page.

 

## Choose a starting task



- [Check Python source with Bandit](https://www.security.run/docs/tool-bandit.html) or [apply a Semgrep rule](https://www.security.run/docs/tool-semgrep.html).

- [Create an SBOM with Syft](https://www.security.run/docs/tool-syft.html), then [reuse that file in another run](https://www.security.run/docs/chain-tools.html).

- [Check ports with Nmap](https://www.security.run/docs/tool-nmap.html) or [connect to your own target](https://www.security.run/docs/targets.html).

- [Analyze a packet capture with Zeek](https://www.security.run/docs/tool-zeek.html) or [read an event log with Chainsaw](https://www.security.run/docs/tool-chainsaw.html).

## Try the complete example

```text
1. Open “Run your first check”.
2. Set SECURITY_RUN_URL and SECURITY_RUN_API_KEY.
3. Install httpx and run the Python example.
4. Look for the “example” YARA rule in the output.
```