Assets

The Assets page lists the hosts your scans found — by infrastructure checks, domain OSINT, technology discovery, AI DAST and the AI Pentest — and the ones you added yourself. For each host it shows the open findings on it, the ports and technologies seen on it, the scans that saw it and what changed. Every host belongs to one product; hosts recorded without one are listed under No product, and a notice at the top links to them.

zoom_inEnlarge

Counters and views

Five counters sit above the list, for the product chosen at the top: Active hosts (and how many are internet-facing), Critical / High exposure, New this week, Stale — not seen by a scan for 30 days — and No owner. Each counter is also a filter: click it to list those hosts.

Three tabs show the same hosts three ways:

zoom_inEnlarge

Finding hosts

• The Product selector at the top chooses All products, one product (with its host count) or No product.
• Search (Search hostname, IP, port, technology or CVE) matches host names, addresses, ports, technologies, tags, owners and notes, and the title or CVE of any finding on a host.
• The filter buttons list the values the product has, with how many hosts have each. Tick several and Apply.
• Active filters show as chips under the bar; ✕ removes one, Reset filters removes them all. Retired hosts are hidden by default — the Status chip says so — and listed again when you clear it.
• Sort by host, open findings, product or last seen. The filters and the sort are part of the page address, so a link opens the same view.
• Views holds common views — internet-facing hosts with Critical or High findings, stale hosts, hosts never scanned, hosts without an owner, retired hosts — and the ones you saved with Save current view. Saved views are your own, in each team.

A host's details

Click a host to open its details beside the list. ↑ and ↓ at the top, or the J and K keys, move to the next and previous host; Esc closes it.

zoom_inEnlarge

Risk and business criticality

A host's risk is the highest severity among its open findings — Open or In Progress. Findings are matched to a host when a scan stores them: the host named in the finding's target — a URL, host:port or a bare name or address — is looked up among the product's hosts. Risk Accepted, False Positive and Resolved findings do not count.

Business criticality — High, Medium or Low — is set by you: how much the business depends on the host. It does not change with findings, and shows as a badge on the host.

How scans fill the list

• Domain OSINT and technology discovery add the host names they find.
• AI DAST and the AI Pentest add each host they scan and link their findings to it.
• Network Discovery and vulnerability scans report what they saw at an address. That is recorded on every host of the product with that address — five host names behind one mail server all get its ports — and a host of its own is created only for an address no host has. Its reverse-DNS name, if any, becomes that host's name.
• Ports and technologies are only ever added: a scan that sees less does not remove what an earlier one found.

Adding and changing hosts

Add a host with Add asset: a host name or an IP address, the product, and optionally owner, business criticality, tags and notes. Tick Scan this host after saving to go straight to Infrastructure Checks with it as the target. Ports, services and technologies are left to the scans.

To change a host, open it and edit the fields on its Overview, then Save changes.

Acting on many hosts

Tick hosts to show the bar of actions at the bottom of the page:

Ticking every host on a page offers Select all N matching: the action then applies to every host the filters match, on every page. If the list changed since the page loaded, the action stops and asks you to refresh.

Deleting hosts

Delete — from the bar, or from a host's details — first shows what it affects: how many hosts and how many open findings are on them.

zoom_inEnlarge

• Ignore these hosts in future scans is ticked by default: discovery and OSINT scans then skip them, so a host you removed does not come back with the next scan. Excluded hosts at the top of the page lists them, and Stop excluding lets scans add one again.
• Resolve their open findings closes the hosts' findings as Resolved. Without it the findings stay in Vulnerabilities, no longer linked to a host.
• Retire instead keeps a host that still runs, with its history and findings.
• Deleting more than five hosts asks you to type how many.

After deleting, Undo in the message at the bottom of the page brings the hosts back with their history, ports and links to findings, reopens findings the deletion resolved, and drops the exclusions it made.

Export

Export downloads the hosts in the current view as XLSX or JSON, with their ports, technologies, status, owner, business criticality, and open findings by severity.

Alerts

Email and Telegram alerts are sent when an infrastructure scan:

• finds a new host;
• rates a host higher or lower than the last assessment did. This is the severity an assessing scanner such as Nessus gives the host, not the risk computed from its findings.

Set them up in the Alerts card on the Integrations tab of the Teams page — see API keys for external systems for the email and Telegram fields.

Who can do what

Roles are described in Teams and roles.