Home / Help centre / Getting started
Getting started
What do I need to set up before I can run a scan?
You need a target (a URL, plus a repository for white-box), a scan profile, and access to AI, either the included Cyberlop AI allowance or your own provider key. Private repositories need a Git token. Black-box targets need ownership verification. Logins are optional.
The short version
Two things are always required: a target and a scan profile. The target says what to test. The profile says how. Everything else depends on the kind of scan you run.
How it works in Cyberlop
| You need | When |
|---|---|
| A target with a Main URL | Always |
| A repository URL over HTTPS | White-box scans. SSH links are not supported. |
| A Git token | Private repositories. Public ones clone at launch. |
| Ownership verification | Black-box targets. It uses a DNS TXT record or staff approval. |
| A scan profile | Always. It belongs to one target. |
| An authentication role | Only to test behind a sign-in. |
| AI access | Always. Use the included allowance or your own key. |
The included Cyberlop AI allowance depends on your plan. When it runs out, scans on it pause until next month. You can connect your own key under Settings → AI Provider to carry on.
A Git token can be personal, set in My Account, or shared by the organisation, set in Settings → Git Access. Use a read-only token.
If the app sits on a private network, you can also run a self-hosted scan agent. Pick it as the scan location in the profile.
What to do next
- Create the target. See How do I add a new target?
- Build a profile, then press Scan.
- Check your limits in Settings → Plan & usage.
Plan the order before you start. Gather the URL, the repository link and any token first, because the New target dialog cannot be edited after you save it, and a missing detail means deleting the target and starting over.
Only test systems you own or have written permission to test. Need help with setup? Contact us.
Related questions
- How do I go from a fresh sign-in to my first finished report?
- How do I add a new target?
- How do I scan a private repository?
- What are the ways to prove I own a black-box target?
- What's the difference between a target, a scan profile and a scan?
Getting started with Cyberlop: from sign-in to your first finding
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.