Many apps send a link or a code by email before you can use them. The agent can now get through that on its own.
- An inbox per run. Each pentest gets its own address at inbox.vulnix.dev.
- Verification links and codes. The agent reads the confirmation email or one-time code, and tests what sits behind the sign-up.
- Nothing kept for long. Messages are tied to the run and cleaned up with it.