ATP360 Deployment Guide

SaaS vs PaaS — Which One Do I Need?

ATP360 is available in two deployment models: SaaS and PaaS. This guide covers both — start with the overview below to confirm which model applies to you, then jump to the relevant section.

Because WorkspaceDNA controls which apps are installed on the SaaS-provided workers, SaaS is well suited to trying out ATP360 and understanding how it works — but it isn't representative of your own application environment, so it's not a substitute for real-world testing. PaaS, where the CUA Worker runs on your own devices, is the better fit once you want to test against the actual apps and configuration your organisation runs in production. This is also why SaaS is trial-only for now — it's intended as an evaluation path rather than an ongoing production testing environment.

Regardless of which model you choose, registration starts in the same place: go to WorkspaceDNA.com/ATP360 and sign up for a trial or licence, selecting SaaS or PaaS as appropriate.

• If you selected SaaS, see Getting Started with ATP360 (SaaS) below.
• If you selected PaaS, see Deploying ATP360 (PaaS) below.

Getting Started with ATP360 (SaaS)

Our SaaS experience for ATP360 is designed to show you as quickly as possible how ATP360 can revolutionize how you approach testing, deploying and hosting everything you need to get started with, from the back end to the CUA workers themselves. See how it works below or watch the video to see how easy it is for yoruself.

• Start your trial from the website - Go to workspacedna.com/atp360 and click Try ATP360 for free. The sign-up flow opens in a new tab.

• Sign in with your Microsoft account - You are prompted to sign up or log in. Choose Sign in with Microsoft, enter your username and password, then complete multi-factor authentication in your authenticator app.

  • 

• Choose where ATP360 runs - the hosting choice. Leave the default of Host it for me selected — it is the recommended option for a trial and removes all setup friction — then click Next.
  • 
• Register your company - Fill in the fields that are not already pre-populated from your Microsoft account, then click Sign Up:
  • Workspace Name — the name your ATP360 workspace will be known by.
  • Company Name, Company Size and Company Country.
  • Main contact: First Name, Last Name and Contact Email.
  • 
• Accept the End User Licence Agreement - Read the ATP360 End User Licence Agreement and click Agree to continue. The agreement covers the Terms, your Customer Data and the trial subscription period. The full EULA can be found here.
  • 
• Choose how you get a CUA Worker - A CUA Worker is the machine ATP360 runs your tests on. You are offered two routes:
  • Have us provision one for you (recommended). We stand up a clean CUA Worker in our environment. It is ready instantly, there is nothing to download or approve, and it is a clean Windows build with no apps installed.
  • Install your own CUA Worker. You download the agent onto a device you control, so testing runs against your real applications, your images and whatever restrictions you enforce on the test device
  • 
  • Trade-off A worker we provision carries only a sample selection of applications — enough to test with, but not your estate. In exchange, we do all the legwork. If you need to test your own apps, use the self-install route below (or move to a tenant-hosted deployment).

• If you would rather install your own worker - Click Download for Windows to get the signed MSIX agent package, install it on any device you like, then pair it with the workspace using the pairing key shown on the same screen. The only network requirement is outbound connectivity on port 443 to the internet — there is no inbound rule to open.

  • 

• Start provisioning - With Have us provision one for you selected, click Start Provisioning. ATP360 builds the worker, powers it on and pairs it to your workspace.

  • 

  • The spinner runs for two to five minutes while capacity is assigned, the worker is powered on and pairing completes. This is a good point to go and get a drink

  • 

• Confirm the worker is paired - When provisioning finishes you get a green CUA Worker provisioned confirmation, naming the worker that is now paired to your workspace, together with a summary of what the trial includes. Click Next Step.

  • 

  • Worth knowing The two trial limits run independently and neither resets: the $25 of AI credit covers step extraction and autonomous test runs across every AI engine ATP360 uses, and the 30 days run from the day you sign up. Usage is visible at any time under Settings > Usage & Trial.
• Run your first test - The final screen is Let's Test. ATP360 accepts a test workload in three forms — from a document, from a video walkthrough, or from a written prompt — and extracts the test steps to run from whichever you give it.
  • 
• For a first run, keep it deliberately simple. Choose From prompt, type a one-line scenario such as "Open notepad" into Draft Test Scenario, and click Extract test steps.
  • 
  • ATP360 turns that sentence into a defined test case: numbered steps, each with an action and an expected outcome that becomes its pass/fail criteria. Review the steps, then click Test Now.
  • 
• The run opens in your workspace. The live view shows the test steps as they execute, a window onto the worker itself, and an action log — along with the parser and orchestrator models in use, the worker and OS under test, elapsed duration, tokens used and the running cost of the test
  • 

That is a working SaaS trial of ATP360: signed up, hosted, provisioned and running tests.

Deploying ATP360 (PaaS)

This section walks through deploying ATP360 into your own Azure subscription via Azure Marketplace, from prerequisites through running your first test, read the guide or watch the video to see how it is done.

1. Prerequisites

Before starting the deployment:

• Register for ATP360 at WorkspaceDNA.com/ATP360 and sign up for a free trial (or purchase a licence).
  • Make sure to select Hosted in your Azure tenant during sign-up.

• • Sign up using the Microsoft account you intend to log in with later — your licence is tied to this account.
  • The screens and steps of this process are the same as with the SaaS version (the Host it for me choice) accept you must provision all infrastructure yourself (including CUA Workers) & must provide your own API keys for Clade and OpenAI, ideally Gemini too. You will not be limited to an AI credit spend in the self hosted version of ATP360 as you are using your own tokens to power ATP360
  • See the SaaS getting started guide above on this page to understand this flow
  • The ATP360 EULA must be accepted to complete the registration process. It is available here for review.
• Review the Architecture, Security & Pre-Deployment Guide (KB article) before deploying. In particular, confirm that the required resource providers are registered on the target subscription:
  • Go to the subscription in the Azure Portal → Settings → Resource providers.
  • Locate each required provider (e.g. Microsoft.App) and confirm its status is Registered. If not, select it and click Register.
  • Refer to the Architecture guide for the full list of required providers.
• Pre-create the required resource groups (see Step 2 below) — at minimum, the resource group that will host the managed application itself should already exist.

2. Deploy ATP360 from Azure Marketplace

• • From the Azure Marketplace listing for ATP360, click Get It Now. This opens the Azure Portal (sign in if prompted).
  • Select the subscription and plan to deploy to (there is currently only one plan available), then click Create.
  • You'll be asked for two resource groups:
    • Managed application resource group — this holds the managed application resource itself. You can select an existing group or create a new one at this step
    • Resource group for underlying resources — this is where ATP360's actual Azure resources (container app, etc.) are deployed. You must create a new resource group to complete this step (this is a Microsoft Marketplace limitation).
  • Click Next to configure virtual network settings or hit Review + Create to have Azure create a new private vnet
  • You will be asked for four things - see the Virtual Networking section below for a guide on the networking requirements 
    • Virtual network
    • Container Apps Infrastructure Subnet
    • Private-endpoint subnet
    • Private DNA Zones
  • Click Review + Create, review the summary, then click Create.
  • The deployment will run for several minutes. Once complete, you'll see a Deployment succeeded confirmation.

Virtual networking

An existing VNet can be used - a new one is not required. The deployment wizard asks for this choice.

On the existing-VNet path, two subnets must be created before deploying, because the deployment creates no network resources itself:

• A Container Apps infrastructure subnet, at least /23, delegated to Microsoft.App/environments
• A private endpoint subnet with private endpoint network policies set to Disabled

The wizard checks subnet size only, so a missing delegation or the wrong policy will fail the deployment.

There is also one step after deploying: assign the Network Contributor role to the managed identity named atp360-bootstrap-id-... on both subnets. Without it the install can succeed but later automatic updates fail. That identity only exists once the first deployment has run, which is why it cannot be done in advance.

If they let the deployment create a new VNet, none of the above applies - they only need to peer it to reach their test machines.

The firewall rules in the prerequisites and this subnet work are separate things. Allowing the outbound addresses does not create or configure any subnet.

3. Locate Your Deployed Resources

• Open the completed deployment and navigate to the managed resource.
• From there, open the managed resource group — this contains the actual deployed resources, including the Front End Container App.
• Open the Container App and copy its Application URL. This is the URL you'll use to access ATP360. It is worth bookmarking this URL for future use.

Note: The first load of the app can take a little while.

4. First Sign-In

• Navigate to the Application URL from Step 3.
• Sign in using the same Microsoft account you used to register your ATP360 trial/licence — this is the account your licence is associated with.
• On successful sign-in, you'll land in the Setup Wizard.

5. Setup Wizard

5.1 Install the CUA Worker

ATP360 runs tests on a device via a CUA Worker — a lightweight agent installed on the machine you want to test on. The worker communicates on port 443 outbound from the worker so you may need to configure device firewall rules to allow for this depending on your network configuration.

• In the wizard, click Download to get the CUA Worker MSIX package.
• Install the package on the target device (deploy however suits your environment).
• Copy the pairing key shown in the wizard.
• Open the installed CUA Worker app, paste the pairing key, and click Pair.
• Once paired, the worker will show as connected in the wizard and will appear in your workspace's list of registered devices.

5.2 Connect AI Engines

ATP360 uses external AI providers to power test generation and execution. Connect the following API keys:

Paste each API key into the wizard — ATP360 will automatically test the connection to confirm the key is valid.

5.3 Configure Model Layers

ATP360 is made up of three logical layers, each of which can use a different model:

• Parser layer — converts prompts, documents, and videos into structured test cases.
  • Recommended: latest OpenAI model (e.g. GPT-5.6 at time of writing) for text/document parsing.
  • For video parsing specifically, Gemini is required (e.g. Gemini 3.1 Pro).
• Orchestrator layer — the "brains" of the operation; turns test case steps into the clicks and actions the worker executes.
  • Recommended: latest OpenAI model, GPT-5.6 at the time of writing.
• Worker layer — the "hands on keyboard"; actually performs clicks, typing, and navigation on the device.
  • Recommended: Claude, preferably an Opus-tier model (e.g. Opus 5) for best reliability.
  • Claude Sonnet-tier models will work but are less capable.

These are starting recommendations — all model selections can be changed later, so feel free to experiment with what works best for your use case.

5.4 Run Your First Test (Optional, from the Wizard)

The wizard offers the option to submit a document, video, or prompt to generate and run your first test immediately. You can also skip this and run your first test afterward from the main platform (see Step 6).

6. Running a Test from the Platform

Once setup is complete, you can run tests at any time from the Test Now button:

• Click Test Now.
• Choose your engines/workers and provide input as a document, prompt, or video. For example, a simple prompt: "Open Word, type Hello World!"
• Click to extract test steps — ATP360 uses your configured parser model (e.g. OpenAI) to turn this into structured test steps.
• Click Run Test.

While the test runs, the interface shows:

• Test steps (left) — with the currently executing step highlighted.
• Action log (right) — a real-time, fully auditable log of what's happening.
• Live screenshots (centre) — of the device under test.
• Token usage, run cost, and duration — shown at the top of the screen.

On completion, you'll see a pass/fail result, the total cost of the run (e.g. $0.36), and a full audit trail of everything that occurred during the test.

Support

If you run into issues during deployment or setup, contact: technicalsupport@workspacedna.com