Home / Help centre / Results & findings
Results & findings
How do I see which endpoints a scan discovered?
Open the scan from Recent Scans and choose the Sitemap tab. Endpoints are grouped by host, and each row shows the method, path, parameters, a short note from the scan and a role chip. You can filter the list and export it as CSV.
The sitemap is the list of endpoints the scan found while it mapped your running application.
Steps
- Click Recent Scans and open the scan.
- Choose the Sitemap tab. The heading reads Discovered endpoints.
- Click a host group to expand or collapse it. Each group shows a count, such as 92 endpoints.
- Read each row.
Good to know
Each endpoint row holds up to five pieces of information.
| Part | What it shows |
|---|---|
| Method badge | GET, POST and so on |
| Path | The endpoint path |
| params | Parameter names, when found |
| Note | One line written by the scan, such as a gated response |
| Role chip | The role tied to the endpoint, such as admin |
The notes are useful. A line like Correctly gated with an HTTP 401 tells you the endpoint refused anonymous access. A line that reports access granted without sign-in deserves a closer look.
The sitemap comes from the recon phase. It is also how a finding gets tied to a specific URL. White-box findings show an Endpoint line for the same reason.
Use Export CSV to take the list into a spreadsheet. To find one endpoint fast, read how to filter the sitemap. For the notes and chips, see what sitemap notes and role chips mean.
A scan that failed early may have a short sitemap. Check the scan status first.
Reading the sitemap is a quick way to check that the scan saw the parts of your application you care about, since a missing area often means the scan could not reach it or had no login for it. Scan the list. Spot gaps.
Related questions
- How do I filter the sitemap by URL or method?
- What do the note and role chip on each sitemap endpoint mean?
- How do I find which endpoint a white-box code finding affects?
- How do I see the findings from one specific scan?
- How do I compare a scan with the previous one?
How to use the Cyberlop scan sitemap
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.