> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codethreat.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Quick Start Guide

> Get your first repository scanned in under 5 minutes

This guide walks you through connecting your first repository and running your first security scan. You'll be up and running in under 5 minutes.

## What You'll Need

* A CodeThreat account ([sign up here](https://app.codethreat.com/signup))
* Access to repositories you want to scan (GitHub, GitLab, Azure DevOps, or Bitbucket)
* Admin permissions for those repositories

***

## Step 1: Sign Up and Create Your Organization

<Steps>
  <Step title="Create Your Account">
    Visit [app.codethreat.com/signup](https://app.codethreat.com/signup) and sign up with your email or GitHub account.

    <Tip>
      Signing up with GitHub allows faster repository connection.
    </Tip>
  </Step>

  <Step title="Complete Onboarding">
    Follow the onboarding flow to set up your organization profile and preferences.

    Your personal organization is created automatically.
  </Step>
</Steps>

***

## Step 2: Connect Your Version Control System

Choose your VCS provider and follow the connection steps:

<Tabs>
  <Tab title="GitHub">
    1. Navigate to **Settings** → **Integrations**
    2. Click **Connect GitHub**
    3. Authorize CodeThreat to access your repositories
    4. Select repositories to import

    <Check>
      GitHub connection complete! Your repositories will appear in the dashboard.
    </Check>

    [View detailed GitHub setup →](/integrations/github)
  </Tab>

  <Tab title="GitLab">
    1. Navigate to **Settings** → **Integrations**
    2. Click **Connect GitLab**
    3. Authorize CodeThreat
    4. Select projects to import

    [View detailed GitLab setup →](/integrations/gitlab)
  </Tab>

  <Tab title="Azure DevOps">
    1. Navigate to **Settings** → **Integrations**
    2. Click **Connect Azure DevOps**
    3. Enter your organization name
    4. Provide a Personal Access Token
    5. Select repositories to import

    [View detailed Azure DevOps setup →](/integrations/azure-devops)
  </Tab>

  <Tab title="Bitbucket">
    1. Navigate to **Settings** → **Integrations**
    2. Click **Connect Bitbucket**
    3. Choose Bitbucket Cloud or Server
    4. Authorize and select repositories

    [View detailed Bitbucket setup →](/integrations/bitbucket-cloud)
  </Tab>
</Tabs>

***

## Step 3: Run Your First Scan

<Steps>
  <Step title="Select a Repository">
    From your dashboard, click on a repository you just imported
  </Step>

  <Step title="Trigger a Scan">
    Click the **Scan Now** button in the repository view.

    CodeThreat will:

    * Clone your repository
    * Run SAST, SCA, Secrets Detection, and IaC Security scans
    * Process results and calculate security scores

    <Info>
      Initial scans typically complete within 2-5 minutes, depending on repository size.
    </Info>
  </Step>

  <Step title="View Results">
    Once the scan completes, you'll see:

    * Total violations by severity (Critical, High, Medium, Low, Info)
    * Violation types breakdown (SAST, SCA, SECRET, IAC)
    * Security score and trends
    * Top vulnerabilities requiring attention
  </Step>
</Steps>

***

## Step 4: Review Your First Violation

<Steps>
  <Step title="Open Violations List">
    Click **Violations** in the repository navigation to see all security findings
  </Step>

  <Step title="Examine a Violation">
    Click any violation to view:

    * Code snippet showing the vulnerable code
    * Location (file and line number)
    * Severity with CVSS and EPSS scores
    * Description explaining the security risk
    * Remediation steps to fix the issue
  </Step>

  <Step title="Take Action">
    You can:

    * Fix the violation in your code
    * Suppress it if it's a false positive
    * Assign it to a team member
    * Comment for discussion
  </Step>
</Steps>

***

## What's Next?

You've successfully connected your first repository and run a security scan. Here's what to do next:

<CardGroup cols={2}>
  <Card title="Enable Automated Scanning" icon="repeat" href="/scanning/automated-scanning">
    Scan every commit and pull request automatically
  </Card>

  <Card title="Invite Your Team" icon="users" href="/team/inviting-members">
    Collaborate with team members on security
  </Card>

  <Card title="Enable AI Features" icon="brain" href="/ai/overview">
    Let AI eliminate false positives and review PRs
  </Card>
</CardGroup>