A scan profile is a saved, reusable setup for scanning one target. It holds the scope, any login roles and the reporting rules. You press Scan on a profile to run it, and the same profile can run again whenever you need.
The short version
A target says what you are testing, and a scan profile says how. The profile is a reusable configuration that belongs to a single target. Each scan is one run of a profile, so you can repeat the same test whenever you like.
How it works in Cyberlop
Every profile has three parts, which match the three sections of the form.
- Scope: the target, a name, optional tags, the vulnerability classes, whether the exploitation phase runs, the scan location, and focus and avoid rules.
- Authentication: zero or more login roles. Each role has a privilege level and one or more methods: form login, header or OAuth 2.0.
- Reporting: minimum severity and confidence, report guidance, rules of engagement and application context.
Once saved, the profile appears on the Scan Profiles page and on its target's page. Click Scan on a row to start a run. A schedule or a CI job also picks a profile, so the same setup can run on a timer or from your pipeline.
You cannot move a profile to another target after you create it. You can edit everything else later.
| Object | Role |
|---|---|
| Target | The application under test |
| Scan profile | The saved settings for testing it |
| Scan | One run of a profile |
| Finding | A vulnerability the scan reports |
What to do next
Create your first one with how to create a scan profile. If you want the wider picture of how these objects fit, the tutorial Cyberlop key terms walks through them in order, from target to finding, and shows how each one leads to the next. To learn what the vulnerability classes mean, see which vulnerability classes Cyberlop tests.
One target can carry several profiles, for instance a quick check and a full audit. See more than one profile per target.
Related questions
- How do I create a scan profile?
- Can I have more than one scan profile for the same target?
- What's the difference between a target, a scan profile and a scan?
- Which vulnerability classes can Cyberlop test for?
- What does the exploitation phase do?
Cyberlop key terms: targets, profiles, scans and issues
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.