How do I go from a fresh sign-in to my first finished report?

Steps

1. Add a target. Go to Targets and click + New target. Enter a name and the Main URL. For a white-box scan, add the HTTPS repository URL too.
2. Create a scan profile. Go to Scan Profiles and click + New profile. Pick the target and give the profile a name.
3. Choose the scope. Tick the vulnerability classes you want. Leave them all empty to test every class.
4. Add a login, if the app needs one. On the Authentication section, click + Add role. With no role, the scan runs without signing in.
5. Save, then press Scan. Click Save. Then click Scan on the profile row. The scan starts straight away.
6. Follow the run. Open Recent Scans and click the row. You can leave the page, because the run keeps going.
7. Review the results. When the scan ends, open the Findings tab and click a row. Set a disposition, then click Update status.
8. Export the report. On the scan page, click Download report for the branded PDF.

Good to know

• A typical scan of a small app takes roughly an hour. Rate limits make a scan slower, not failed.
• A target cannot be edited later. Check the URL and branch before you click Create target. The page Why can't I edit a target? explains the reason.
• Black-box targets need ownership verification before the first scan. Read how to create a black-box target.
• Your plan sets how many scans you can run. Check Settings → Plan & usage for the numbers.

Keep the first run small. Most first scans go smoothly when you pick one target, one profile and no login at first, because a short list of settings is easy to check if a result surprises you. Most first scans go smoothly when you keep the set-up small: one target, one profile, and no login at first. Once you have seen a report from start to finish, you can add roles, rules and schedules one at a time, and see what each one changes in the next run.

The full walkthrough, with a screenshot for each step, lives in the in-app Documentation page. For a longer read, see the getting started tutorial. Stuck? Contact us.

Related questions

• What do I need to set up before I can run a scan?
• How do I add a new target?
• Where do I find the built-in documentation and step-by-step walkthrough?
• What are the five phases of a Cyberlop scan?
• What's the difference between a target, a scan profile and a scan?

Full tutorial

Getting started with Cyberlop: from sign-in to your first finding

Step-by-step, with annotated screenshots.

Updated 8 October 2026 · Back to the help centre