Home / Help centre / Running scans
Running scans
What happens when I start a scan from a profile set to a scan agent?
When a profile's scan location is a scan agent, every scan from that profile is dispatched to the agent and runs on your own network. It clones the repository and reaches the target locally, then reports results to Cyberlop over outbound HTTPS only.
The short version
If a profile's Scan location is a scan agent, pressing Scan sends the job to that agent instead of the Cyberlop cloud, and the work happens on a machine in your own network. In the app, the scan looks the same.
How it works in Cyberlop
This agent is one container that you run inside your network, and it asks Cyberlop for queued jobs over an outbound connection. Cyberlop never connects inward.
- You press Scan on the profile row. That is all you do.
- The job joins the queue and the agent picks it up.
- Next it clones the repository and reaches the target from inside your network.
- It starts a local engine and runs the same five-phase pipeline that a cloud scan runs.
- It streams the live log, cost and findings back, and the scan page fills in as usual.
Only outbound port 443 to app.cyberlop.com is needed. There are no inbound ports and no firewall changes, and your code and target stay on your network the whole time.
An enrolled, online agent also raises your organisation's concurrent scan limit, because it brings its own capacity. Revoke an agent and its key stops working at once. Its profiles then go back to the Cyberlop cloud.
What to do next
- Check that the agent shows online in Settings → Scan agents before you start a scan.
- If it shows offline, read why a profile will not run on an offline agent.
- Confirm where a finished scan ran in the Location column of Recent Scans.
- Read the scan agents tutorial to set one up.
Related questions
- What is a self-hosted scan agent, and when do I need one?
- How do I make a profile run on a self-hosted scan agent instead of the cloud?
- Why won't a profile set to my scan agent start a scan?
- Does adding a scan agent let me run more scans at once?
- Does my code leave my network when I use a scan agent?
Cyberlop self-hosted scan agents: scan private apps from inside your network
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.