The New target dialog says a repo URL is required, but my app has no repository. What do I do?

Why this happens

The dialog starts on a scan type that reads source code. White-box scans need a Git repository because the point is to read the code while testing the running app. With no repository there is nothing to read, so the dialog asks for one and will not let you continue until you give it. The fix is to choose the other scan type, not to invent an address.

How to fix it

1. Open the dialog. Go to Targets and click + New target.
2. Enter the basics. Fill in the Name and the Main URL. Add backend URLs if the app has more than one, one per line.
3. Pick Black-box. Under Scan type, click the Black-box card. Repo URL (HTTPS) and Repo branch grey out.
4. Set environment and team. Choose Dev, Staging or Prod. Add a team name if you want one.
5. Create and verify. Click Create target, then complete ownership verification on the target page before you run a scan.

Still not working?

Black-box scans test only the live URL, so a finding points to an endpoint and cannot point to a file and line of code. If you later want that, create a new white-box target with a repository, since you cannot edit a target.

Already have a repository but the dialog still complains? Make sure the address starts with https://. Cyberlop does not accept SSH addresses, and this article explains the refusal.

Not sure which type fits? Compare the two scan types or ask at /contact.

Related questions

• How do I create a black-box target with no source code?
• Why are the repository fields greyed out in the New target dialog?
• What's the difference between a white-box and a black-box target?
• How do I verify that I own a black-box target?
• How do I connect a Git repository to a target?

Full tutorial

How to add a target in Cyberlop: the New target dialog, field by field

Step-by-step, with annotated screenshots.

Updated 8 October 2026 · Back to the help centre