Platform

Platform overview How it works Authorization testing Evidence & reports Private scanning Integrations

Solutions

Security agencies Product teams Regulated industries Partner programme

Learn

Blog Knowledge hub Compare

Resources

Pricing Documentation Help centre FAQ Security & data What we haven’t proved

Company

About Contact Careers Sign in to the platform Start a $199 pilot →

Home / Help centre / Targets & repositories

Targets & repositories

Why can't I find the Ownership verification card on my target?

Quick answer

The Ownership verification card appears only on black-box targets, which have no repository. If your target has a repository URL it is a white-box target, and the card does not show. This is normal, and no verification step is waiting.

Why this happens

Ownership checks apply to black-box scans, which test a live URL with no source code. A white-box target is different, because it points at your own repository and Cyberlop clones that code when the scan starts. So the target page for a white-box target has no Ownership verification card at all. Its absence tells you the target has a repository, not that something went wrong.

How to fix it

  1. Go to Targets. Click Targets in the sidebar and select the target's name.
  2. Look at the Repository row. In Target details, see whether Repository shows a web address or a dash.
  3. Read the result. An address means white-box, so no card is expected. A dash and the line "No repository configured" mean black-box, so the card should be there.
  4. Scroll the page. The card sits below Target details and above the Scan profiles list. Scroll down if your window is small.
  5. Create a black-box target if that is what you need. Targets cannot be edited, so click + New target, choose Black-box and create a fresh one.

Still not working?

The card shows a green Verified badge once ownership is confirmed, and it states that black-box scans can run.

If your target has no repository and still shows no card, check that you are in the right workspace and signed in with a role that can see targets. After that, write to /contact with the target name and we will look into it.

Full tutorial

Verify target ownership in Cyberlop: DNS TXT record or staff approval

Step-by-step, with annotated screenshots.

Updated · Back to the help centre

Still stuck?

Tell us what you see on screen and an engineer will help you sort it out.