Platform

Platform overview How it works Authorization testing Evidence & reports Private scanning Integrations

Solutions

Security agencies Product teams Regulated industries Partner programme

Learn

Blog Knowledge hub Compare

Resources

Pricing Documentation Help centre FAQ Security & data What we haven’t proved

Company

About Contact Careers Sign in to the platform Start a $199 pilot →

Home / Help centre / Targets & repositories

Targets & repositories

How do I add a new target?

Quick answer

Open Targets and click + New target. Enter a name and Main URL, choose White-box (add an HTTPS repo URL and branch) or Black-box, pick an environment, optionally add a team, then click Create target. Targets cannot be edited later.

Steps

  1. Click Targets in the sidebar.
  2. Click + New target at the top right. A single dialog opens.
  3. Enter a Name and the Main URL. Add Backend / additional URLs if the app has them.
  4. Choose the Scan type. For White-box, enter the Repo URL (HTTPS) and the Repo branch. For Black-box, leave the repo fields alone.
  5. Choose an Environment. Optionally enter a Team.
  6. Click Create target, or Cancel to leave without saving.

Good to know

FieldWhat to enter
NameA label you will recognise, for example "Acme Web"
Main URLThe primary address scans run against, such as https://staging.example.com
Backend / additional URLsOptional. One per line, or comma-separated.
Repo URL (HTTPS)White-box only. SSH links are not supported.
Repo branchDefaults to main
EnvironmentDev (default), Staging or Prod
TeamOptional text, such as "Platform"
  • Targets are immutable. To change one, delete it and create it again. Check every field before you save.
  • A public repository is cloned when the scan starts. A private one needs a Git token.
  • A black-box target must be verified as yours before it can be scanned.
  • Your plan limits how many targets you can add. See Settings → Plan & usage.

Take a minute over the choice of scan type, because it decides what the scan can see. White-box lets the agents read your code and point to a file and line, while black-box works from the live URL alone and needs ownership proof first.

Next, create a profile from the target page. Only add systems you own or may test. The longer guide is here. Stuck? Contact us.

Full tutorial

How to add a target in Cyberlop: the New target dialog, field by field

Step-by-step, with annotated screenshots.

Updated · Back to the help centre

Still stuck?

Tell us what you see on screen and an engineer will help you sort it out.