Yes. Each scan runs in its own isolated, temporary container, with your repository mounted read-only. Cyberlop wipes the clone when the scan reaches a final state and removes the workspace when you delete the scan. Nothing carries over between scans.
The short version
Every scan gets a container of its own, and that container disappears when the work ends. Two scans never share files, even when they test the same target on the same day and the same team starts both of them within a few minutes.
| Property | What the Security page says |
|---|---|
| One container per scan | Each scan runs in its own isolated, ephemeral container |
| Repository access | Mounted read-only |
| Clone lifetime | Wiped when the scan completes, fails or is cancelled |
| Workspace | Removed when the scan is deleted |
How it works in Cyberlop
When you press Scan, Cyberlop starts a fresh container for that run alone. The agents clone your repository into it, read the code and test the running app from there. The documentation adds that nothing stays cached across scans, so a later scan cannot pick up leftovers from an earlier one.
The read-only mount matters as well. They can read your files but cannot change them, which fits the promise that Cyberlop only clones your code. See whether Cyberlop can change your repository.
That is one wall. A second wall sits behind it. Each organisation also has its own private database schema, so your results never mix with another customer’s. For that part, read how workspace data stays separate.
Both walls serve one idea, tenant isolation, which says that the work of one customer must never touch the work of another, however busy the platform gets.
What to do next
- Learn what happens to the clone in source code after a cloud scan.
- If code must stay on your own network, read about scan agents.
- Browse the security page for the full list.
Need more detail for a review? Contact us at /contact.
Related questions
- Is my workspace's data kept separate from other organizations?
- What happens to my source code after a cloud scan?
- Can Cyberlop change anything in my repository?
- Does my code leave my network when I use a scan agent?
- Can I delete scans, targets and data whenever I want?
Cyberlop self-hosted scan agents: scan private apps from inside your network
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Security question we did not answer?
Our team will answer it directly, or walk through it on a call with your security lead.