Home / Help centre / Targets & repositories
Targets & repositories
Do white-box targets need ownership verification?
No. The Ownership verification card appears only on black-box targets. A white-box target, which has a repository, shows no such card. You still must be authorised to test the application, and your Git token must be allowed to read the repo.
The short version
Ownership verification belongs to black-box targets. When you open a white-box target, the page shows Target details and Scan profiles, but no Ownership verification card, and you can press Scan once a profile exists.
How it works in Cyberlop
A black-box target has only a URL, so Cyberlop asks for proof that the URL is yours. The repository for white-box work is one that you supply. Cyberlop reads it with the address you give it and, for a private repository, with a token that you save yourself, so the code is only reachable when you hand over access.
| Target type | Ownership card | What you must have |
|---|---|---|
| White-box | Not shown | A repo URL over HTTPS and, if private, a read-only Git token |
| Black-box | Shown | DNS TXT record or staff approval |
This does not mean anything goes. Only scan applications you own or have written permission to test. That is your responsibility as the account owner, whatever the target type.
What to do next
For white-box work, create the target with its repository, add a profile and press Scan. Missing the Ownership card on a target you expect to be black-box? Check whether it has a repository. Read why the card is missing, or compare the types in white-box versus black-box. For anything else, use /contact.
Related questions
- What's the difference between a white-box and a black-box target?
- Why can't I find the Ownership verification card on my target?
- What are the ways to prove I own a black-box target?
- How do I verify that I own a black-box target?
- Where can I see whether a target's ownership has been verified?
Verify target ownership in Cyberlop: DNS TXT record or staff approval
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.