HackGATE captures every request that flows through your proxied environment and makes it available through the analytics API. Use these endpoints to understand researcher activity, verify test coverage, and correlate activity with your program timeline.
Authentication and parameters
All analytics endpoints require a Bearer token in the Authorization header. Include your organization context in the token.
Each endpoint accepts the same three query parameters:
The url parameter must be the hackgatedName (e.g. www-myorg.hackgate.io), not your origin URL.
Most active users
Returns the top 10 researchers ranked by total request count over the selected period.
Total request count
Returns the total number of requests proxied through the site during the selected period.
Path discovery
Returns the top 1,000 URL paths tested by researchers, ordered by request count. Use this to see which areas of your application researchers are targeting.
Use path discovery to verify researchers are exercising the right areas of your application.
Traffic timeline
Returns per-user traffic over time using an automatic date histogram. Use this to visualize activity patterns across the testing period.
Hourly traffic table
Returns a per-user hourly breakdown of request counts, suitable for tabular display.
Multi-site summary
If your program spans multiple HackGATE sites, use the summary endpoints to aggregate traffic across all of them in a single request.
Summary table — cross-site per-user request counts:
Summary timeline — cross-site traffic over time: