Home / Help centre / Security & privacy
Security & privacy
Can I see what each agent did during a scan and how it reached a finding?
Yes, in part. Each scan page shows the phase, cost, tokens, discovered endpoints and findings. Every finding carries its evidence, location and reproduction steps. Each phase also writes readable notes and per-agent logs. Only the platform administrator reads the full workflow log.
The short version
You can follow how a scan reached a finding from the evidence it leaves behind. The deepest layer, the raw workflow log, stays with the platform administrator.
How it works in Cyberlop
Every phase writes human-readable deliverables and per-agent logs. The platform administrator can open the full workflow log for any scan. That log shows what each agent did, which model it used and how it reached each finding.
Your own view sits one level up. Open Recent Scans, then the scan, to see this trail.
| Where | What it shows |
|---|---|
| Overview tab | Status, trigger, location, cost, profile, start and finish times, tokens and lines of code |
| Sitemap tab | Endpoints the scan found, with a short note per endpoint and the role used |
| Findings tab | Each finding with severity, class, confidence, triage state and location |
| Finding dialog | Summary, then Evidence: auth used, payload, request, response, reproduction steps and screenshot |
Read a finding from the top. The location points to the file and line. The payload, request and response show what the agent sent and what came back. The curl steps let you repeat the check yourself, on your own machine, and see the same response the agent saw.
What to do next
Open one completed scan and read a single finding end to end. Compare its evidence with the sitemap note for the same endpoint, because that pairing shows most of how an agent reasoned from the code to a working proof against the live app.
If you need the raw log for a particular scan, ask through the contact page. Two related answers explain why the raw workflow log stays private and how to view the request and response.
Related questions
- Why can't I see the raw workflow log for my scan?
- How do I watch a scan while it's running?
- How do I see the HTTP request and response that proved a finding?
- What are the five phases of a Cyberlop scan?
- How do I reproduce a finding myself?
The scan detail page: how to read a Cyberlop scan from Overview to Diff
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Security question we did not answer?
Our team will answer it directly, or walk through it on a call with your security lead.