Platform

Platform overview How it works Authorization testing Evidence & reports Private scanning Integrations

Solutions

Security agencies Product teams Regulated industries Partner programme

Learn

Blog Knowledge hub Compare

Resources

Pricing Documentation Help centre FAQ Security & data What we haven’t proved

Company

About Contact Careers Sign in to the platform Start a $199 pilot →

Home / Help centre / Scan profiles

Scan profiles

How do I fill in the Application context for a profile?

Quick answer

On the Reporting section, scroll to Application context and fill in the boxes you can: Overview, Tech stack, Frameworks, Sensitive data types and more. Click Save. The scan uses this background to understand your app. Every field is optional.

Steps

  1. Open the profile. Use the pencil icon on its row in Scan Profiles, or start a new profile.
  2. Go to Reporting. Choose Reporting in the left-hand switcher and scroll to Application context.
  3. Fill what you know. Complete the text boxes in plain language. Short notes are enough.
  4. Skip what you do not know. Leave any box empty, because none of them must be filled.
  5. Save. Click Save in the footer.

Good to know

The form has ten boxes. Fill them in any order, and come back to add more detail whenever you like. The more the scan knows about your stack, your data and the flows that make you money, the better it can aim its testing. You do not need exact wording. A few honest lines about each topic work well, and you can refine them after you see your first report.

FieldWhat to enter
OverviewWhat the app does and who uses it
Tech stack / FrameworksLanguages, frameworks and databases
Sensitive data typesKinds of data that matter, such as payment details
Trust boundaries / Tenancy modelWhere trust changes and how customers are separated
Business-critical flowsActions that must never break, such as checkout
Third-party integrations / Known endpoints / API spec referenceServices you call, important routes and where your API spec lives

Cyberlop redacts detected personal data before the context reaches the AI engine, but web addresses and IP addresses stay. Avoid pasting real customer data or secrets.

After your first save you can let Cyberlop draft these boxes from your repository, as shown in auto-generating the Application context. Review any draft against what you know to be true, and edit the boxes by hand if something is off. A short, accurate context beats a long guess every time. Questions? Use /contact.

Full tutorial

Application context in Cyberlop: fill the ten fields and use Auto Generate from Repo

Step-by-step, with annotated screenshots.

Updated · Back to the help centre

Still stuck?

Tell us what you see on screen and an engineer will help you sort it out.