Sign-up and login
Last updated: Oct 26, 2026
First-time sign-up
To sign up for the platform, go to app.fluidattacks.com/SignUp. Then, follow the instructions. For a description of the steps, read "Sign up to Fluid Attacks".
You can sign up only with a valid Google, Azure, or Bitbucket corporate account. You must also give a Git repository to test. If you import repositories with Open Authorization, make sure that third-party application access is on, for example, in Azure DevOps.
All Essential plan features are free for 21 days. During the free trial or after it ends, you can subscribe to a paid plan.
User authentication
The Fluid Attacks platform does not create users and credentials. For stronger security, your trusted providers do the authentication: Microsoft, Google, and Atlassian. Thus, you manage the permissions for authentication in your configuration settings with those providers.
To log in to the Fluid Attacks platform, go to app.fluidattacks.com. Then, continue with your corporate account through one of the supported identity providers: Google, Microsoft Azure, or Bitbucket. Auth0 manages the authentication. Auth0 makes the process more secure, because your trusted provider does the authentication.
Grant permission to Fluid Attacks for authentication
Your corporate account provider makes the authentication to the Fluid Attacks platform possible. Sometimes, the domain administrator must consent to it. This extra step occurs mostly for Microsoft users. To learn how to grant this permission, read the official Microsoft page "Grant tenant-wide admin consent to an application".
Permissions
Microsoft users grant Fluid Attacks the User.Read permission. With this permission:
- Users can sign in to the platform.
- The platform can read the profile of signed-in users.
- The platform can read basic company information of signed-in users.