Skip to main content

Takumi Assessments Now Support Email-Based MFA

· One min read
Mokusou
Mokusou
Software Engineer @ GMO Flatt Security Inc.

Takumi assessments now support applications that require multi-factor authentication (MFA) by email.

Credential configuration UI

Overview​

Takumi did not support MFA by email, so it had to be turned off for every assessment to run properly.

With this release, blackbox assessments and penetration tests let you pick an email address that Takumi can receive mail at during the assessment.

This is not limited to one-time codes for MFA — it covers any feature that relies on email, such as magic links and sign-up confirmation messages.

Getting Started​

This feature is available to all organizations from the blackbox assessment and penetration test dispatch screens.

When you add a credential, select "Takumi-managed email" as the account email, then either issue a new address or pick one your organization already holds. Up to 5 addresses can be registered.

For how to configure the address and register it on the target application, see Signing In With an Emailed One-Time Code.