Quickstart
Install Tachyonic and run your first security scan in 5 minutes
Install
curl -fsSL https://tachyonic.sh/install | bashSupports macOS (arm64, amd64) and Linux (arm64, amd64). Verifies SHA-256 checksum automatically.
Set API Key
Tachyonic sends prompts to your target via the provider's API. Set the key for your provider:
# Anthropic
export ANTHROPIC_API_KEY=sk-ant-...
# OpenAI
export OPENAI_API_KEY=sk-...
# Google AI
export GOOGLE_API_KEY=AI...Run a Scan
tachyonic scan \
--target https://your-api.com/v1/chat/completions \
--provider anthropic \
--model claude-haiku-4-5-20251001Tachyonic sends adversarial prompts to the target and analyzes responses for vulnerabilities.
Scan a Specific Category
tachyonic scan \
--target https://your-api.com/v1/chat/completions \
--provider openai \
--categories prompt-injection,system-prompt-extractionLimit Attack Count
tachyonic scan \
--target https://your-api.com/v1/chat/completions \
--provider anthropic \
--max-attacks 10View Results
By default, results are written to stdout as JSON. Save to a file:
tachyonic scan \
--target https://your-api.com/v1/chat/completions \
--provider anthropic \
--format json \
--output scan-results.jsonGenerate an HTML report:
tachyonic scan \
--target https://your-api.com/v1/chat/completions \
--provider anthropic \
--format html \
--output report.htmlCloud Scans (Platform)
Submit scans to the Tachyonic platform for team visibility and historical tracking:
# Login first
tachyonic login
# Submit to platform
tachyonic scan \
--target https://your-api.com/v1/chat/completions \
--provider anthropic \
--cloudView results at platform.tachyonic.co.
Start a runtime
For longer-running scans against MCP servers or agent stacks, start a runtime — a region-pinned, budget-capped execution with egress controls and approval gates. Drive it from the dashboard or the CLI.
Dashboard:
- Sign in at platform.tachyonic.co.
- Go to Runtimes → New Runtime.
- Pick a target (or paste an endpoint), a region (US or EU), and a budget.
- Click Start Runtime to start a live runtime, or Create Plan for a dry-run.
CLI:
tachyonic runtime start --target https://your-api.com --region aws-us-east-1Returns a runtime ID. Follow it to completion with:
tachyonic runtime watch <runtime_id>The runtime model and full command surface are documented in Runtimes.
Next Steps
- CLI Reference — all commands and flags
- Attack Catalog — what Tachyonic tests for
- MCP Scanning — test MCP servers
- API Reference — integrate with CI/CD
- Runtimes — lifecycle, regions, budgets, approvals, CLI