On the right hand side you can find the personal information you have provided when registering. Please fill in the remaining fields, i.e. your full name and address. This information is necessary if you decide to buy one or more of the commercial Chorizo! products like "Five Hosts" scanning.

On the left hand side are three boxes. The first shows all your subscribed products, the second leads you to the purchasing page if you want to upgrade Chorizo! to the full version. The third box leads you to a question form where you can enter questions regarding the product.

Since you registered for either the free Chorizo! account or one of our commercial Chorizo! products, you are already able to login. To start scanning, we need some further prerequisites, which are explained here: The first step is to activate Chorizo! for your site's hostname. Click on the free account.

On the next page you need to enter the hostname of the site you want to scan:

Be careful! Chorizo! distinguishes between www.testingsite.com and testingsite.com for security reasons. If your web page www.testingsite.com contains references (i.e. CSS, images etc.) to testingsite.com or something like static.testingsite.com, Chorizo! won't load these elements because they haven't been activated here. You can avoid this by upgrading to one of our commercial products and register both testingsite.com/static.testingsite.com and www.testingsite.com.

After registering a host successfully, a new button called "Signature" will appear. You are now prepared to download the signature file:

Please download the file by clicking on this "Signature" submit button and put it into the document root directory of your web server. In this example, put the signature file into the document root for the server/virtual host www.testingsite.com. Chorizo! will not work unless it is able to find this signature file in your document root directory!

Chorizo! has two operation modes. The first and most comfortable mode is to use Chorizo! as a proxy server in your web browser. Therefore you need to make an entry into your browser's proxy configuration. We show this using a common Firefox browser starting at an example page:

Starting from a page you want to scan, you need to open Tools/Options to configure the proxy correctly.

Go to the Tab “General” in the Popup-Window and press the button “Connection Settings”.

Now choose "Manual Proxy configuration" and put in the following values:

• HTTP Proxy: chorizo-scanner.com
• Proxy Port: 3128
• "Use this proxy server for all protocols"

After confirmation and closing of the popups, you need to reload your page. You'll see a Chorizo! console window in the upper right of the webpage which could be used right away.

If you receive the following layout of the Chorizo! proxy UI, it is likely that you still need to install your signature key in the document root folder on your website, or that the host you wanted to scan hasn't been registered yet on the Chorizo! "My licenses" page. In the latter case, please click on the "Not licensed yet!" image to go to the Chorizo! web page.

The scanning of your pages is described in the Scan Guide.

Please note: we recommend using a proxy switch tool for the daily work as it makes turning Chorizo! on and off much easier. Have a look at Foxy Proxy or Switch Proxy for Firefox browsers. Internet Explorer users can use for example ProxySwitcher Lite or other tools.

If you don't want or can't use Chorizo! as a proxy you have two choices: either ask sales for the appliance version of Chorizo! or use the so-called CGI mode within Chorizo!.

The usage of the CGI mode is very easy: you just have to click at the top menu bar on the item "Scan my site now!" within the Chorizo! website:

On the "Scan my site now!" page you can see a form where you should enter the URL of the website you want to scan, i.e. http://www.testingsite.com/. Note that Chorizo! generally doesn't work with frame based applications (see FAQ)

After clicking on "Open URL for scanning!" you will hopefully be on your site and have the Chorizo! UI displayed in the upper right of the page.

If Chorizo! displays the following UI you still need to install the signature file in the document root of your webserver or register your host on the "My Chorizo!" page.

Check out the video tutorial that explains how to configure the Chorizo! proxy in your browser.