Not in normal operation. The Security page says there is no human access to source code in normal operation, and support access happens only on request. When a support session starts, the Activity feed shows it with an end time and a reason.
The short version
Staff do not browse customer code as part of running the service. Support can get access only when you ask for it, and the app then leaves a trail you can read.
| Question | Answer |
|---|---|
| Routine human access to source? | None in normal operation |
| When can support get in? | Only on request |
| Where can I see it? | Activity feed, as Session Start and Session End entries |
| What does an entry show? | An end time, a reason such as a ticket number, and who started it |
How it works in Cyberlop
That rule sits on the Security page: no human access to source in normal operation, and support access only on request. The Activity page backs it up. Support staff appear in the feed with a name and an email, and each session shows as a Session Start and a Session End entry. The start entry carries the end time and a reason, such as a ticket number.
You can search the feed for "Support Session" to find every one. See what support session entries mean.
One related point: the full workflow log of a scan is available to the platform administrator, and the scan page in the app does not show it. The documentation says every phase writes readable deliverables and agent logs, so there is always a record of what each agent did.
Access to your data inside the app follows role-based permissions. An administrator sees the whole organisation, and others see less.
What to do next
- Open the Activity page and search for support entries.
- Read how to see what the agents did.
- Limit your own staff with custom role permissions.
To start or end a support session, use /contact.
Giving each person only what they need follows need to know.
Related questions
- What is a Support Session entry in the activity feed?
- Can I see what each agent did during a scan and how it reached a finding?
- Is my workspace's data kept separate from other organizations?
- How do I see what's been happening in my workspace?
- Can I delete scans, targets and data whenever I want?
Cyberlop activity feed: what it records and how to use it for audits
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Security question we did not answer?
Our team will answer it directly, or walk through it on a call with your security lead.