Security Dashboard
Unified view of your authorized attack surface.
Findings by Severity
Recent Scans
View all| Target | Profile | Status | When |
|---|---|---|---|
| 203.0.113.0/24 | recon | running | 8/30/2026, 10:42 AM |
| cyberops.local | full | succeeded | 8/29/2026, 9:15 PM |
| app.cyberops.local | vuln | succeeded | 8/28/2026, 4:03 PM |
Assets
Domains, IPs, apps, and repositories under authorized assessment.
Add an asset
| Target | Type | Criticality | Added | |
|---|---|---|---|---|
| cyberops.local | domain | critical | 8/17/2026 | |
| app.cyberops.local | url | high | 8/17/2026 | |
| 198.51.100.24 | ip | high | 8/18/2026 | |
| 203.0.113.0/24 | cidr | medium | 8/18/2026 | |
| github.com/cyberops/platform | repo | medium | 8/21/2026 |
Scans
Discovery and vulnerability assessment runs across your assets.
| Target | Profile | Status | Findings | Started |
|---|---|---|---|---|
| 203.0.113.0/24 | recon | running | 3 | 8/30/2026, 10:42 AM |
| cyberops.local | vuln | queued | — | 8/30/2026, 10:40 AM |
| cyberops.local | full | succeeded | 34 | 8/29/2026, 9:15 PM |
| app.cyberops.local | vuln | succeeded | 12 | 8/28/2026, 4:03 PM |
| 198.51.100.24 | recon | failed | 0 | 8/27/2026, 11:20 AM |
Launch a scan
Select a verified asset and a scan profile.
Findings
Every exposure correlated to an asset, severity, and source.
| Severity | Finding | CVSS | Status | Source | Last seen |
|---|---|---|---|---|---|
| Critical | SQL injection in legacy search endpoint CWE-89 | 9.8 | open | scanner:vuln | 8/30/2026 |
| Critical | Exposed admin panel without authentication CWE-306 | 9.1 | triaged | ai-pentest | 8/29/2026 |
| High | Subdomain takeover candidate: staging.cyberops.local CWE-284 | 8.2 | open | ai-pentest | 8/30/2026 |
| High | TLS 1.0 enabled on mail.cyberops.local CWE-326 | 7.4 | remediating | scanner:recon | 8/29/2026 |
| Medium | Missing Content-Security-Policy header CWE-693 | 6.1 | open | scanner:vuln | 8/28/2026 |
| Medium | Directory listing enabled on /backups CWE-548 | 5.3 | triaged | scanner:vuln | 8/28/2026 |
| Low | Server version disclosure in HTTP headers CWE-200 | 3.7 | resolved | scanner:recon | 8/27/2026 |
| Info | SPF present but DMARC policy is none | — | open | scanner:recon | 8/29/2026 |
No findings match these filters
Try widening the filters above.
AI Pentest
A multi-agent engine reasons through attack paths — with approval gates before any state-changing step.
| Run | Status | Phase | Planner | Started |
|---|---|---|---|---|
| PT-0042 · cyberops.local | awaiting approval | validation | planner-v2 | 8/30/2026, 9:58 AM |
| PT-0041 · app.cyberops.local | running | analysis | planner-v2 | 8/30/2026, 8:12 AM |
| PT-0040 · cyberops.local | succeeded | report | planner-v2 | 8/28/2026, 2:41 PM |
| PT-0039 · 198.51.100.24 | failed | recon | planner-v1 | 8/26/2026, 5:07 PM |
New AI pentest
The AI engine runs recon → analysis → validation → report. High-risk validation steps require your explicit approval before proceeding. No live exploitation is ever performed.
OSINT Investigation
Correlate indicators against your assets, findings, and threat feeds.
Investigate Indicator
Domain appears in two threat feeds and resolves to infrastructure previously flagged for phishing campaigns.
Threat Feeds
Recent Investigations
Compliance Posture
Map findings to control frameworks and prove your security posture.
Reports
Export findings, compliance posture, and pentest results as PDF, JSON, or CSV.
New Report
Report History
| Type | Format | Status | Created | |
|---|---|---|---|---|
| findings | ready | 8/29/2026, 9:30 PM | ||
| compliance | CSV | queued | 8/30/2026, 10:44 AM | |
| pentest | failed | 8/26/2026, 6:12 PM |
Audit Log
Append-only, hash-chained record of every security action (SOC 2 non-repudiation).
| When | Actor | Action | Target | Outcome |
|---|---|---|---|---|
| 8/30/2026, 10:44 AM | user | report.generate | compliance/csv | success |
| 8/30/2026, 10:42 AM | user | scan.launch | 203.0.113.0/24 | success |
| 8/30/2026, 9:58 AM | system | pentest.phase.transition | PT-0042 → validation | success |
| 8/30/2026, 8:12 AM | user | pentest.launch | app.cyberops.local | success |
| 8/30/2026, 8:05 AM | user | auth.login | admin@cyberops.local | success |
| 8/29/2026, 11:51 PM | user | auth.login | admin@cyberops.local | failure |
| 8/29/2026, 9:15 PM | user | finding.status.change | TLS 1.0 enabled → remediating | success |
| 8/29/2026, 9:02 PM | user | webhook.endpoint.create | https://hooks.example.com/cyberops | success |
| 8/28/2026, 4:03 PM | user | scan.launch | app.cyberops.local | success |
| 8/28/2026, 2:41 PM | user | asset.create | github.com/cyberops/platform | success |
Settings
Manage your account and integrations.
Account
- Name
- Demo Admin
- admin@cyberops.local
- Organization
- CyberOps Demo Org
- Role
- owner