Open the finished scan, select the Sitemap tab and click Export CSV. The tab lists the endpoints that scan discovered, grouped by host, with the method, path and parameters for each. The file is a normal download, so look in your browser's downloads folder and open it in a spreadsheet.
Steps
- Click Recent Scans in the sidebar, then click the row of the scan you want. Rows open the scan detail page.
- Select the Sitemap tab. The count in brackets shows how many endpoints the scan found.
- Optional: type in Filter by URL or method... to read through one part of the list.
- Click Export CSV. Your browser saves the file.
Good to know
The sitemap is a list of endpoints found during that one scan. Each row shows a method badge such as GET or POST, the path, any parameters the scan saw, a one-line note written by the scan, and a role chip, which makes the file handy for checking coverage or handing a list to a developer. Same list, now in a file you can sort.
| What you see | What it tells you |
|---|---|
| Host group | Endpoints are grouped by host, with a count such as "26 endpoints". |
| Method and path | How the endpoint is called. |
| Params | Parameter names the scan saw. |
| Note | A short remark written by the scan, for example that a route is correctly gated. |
| Role chip | The sign-in role the scan used on that endpoint. |
A failed scan can still hold a sitemap, because it keeps whatever it found before it stopped, and you can export that list in exactly the same way.
I cannot show the exact columns of the file here, because the file is only created when you download it. Open it once and check the header row.
Looking for findings instead of endpoints? See how to export findings as CSV. For a walk through the tab itself, read the sitemap tutorial. If the button is missing, contact us.
Related questions
- How do I see which endpoints a scan discovered?
- How do I filter the sitemap by URL or method?
- How do I export findings to CSV?
- How do I export my list of targets?
- What do the note and role chip on each sitemap endpoint mean?
How to use the Cyberlop scan sitemap
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.