Global search and activity log
Finding anything across assets, vulnerabilities, scans and credentials.
Global search
The search box in the top navigation, Global search for threats or assets..., queries four record types at once and returns them in one result list. It searches the current team only; switch team to search another.
| Result prefix | Fields searched | Opens |
|---|---|---|
| Assets: | Name, IP address, ports, severity, notes, technology, groups, tags, scan date and ID. | Assets, searched for the host |
| Vulnerabilities: | Title, class, CVE, target, product, scanner, description, status, owner, notes, tags and dates, among others. | Vulnerabilities, searched for the CVE (or the title) |
| Scan History: | Target, product, type, status, parameters, scanners, scan ID and the scan log. | Scan History, searched for the scan |
| Credentials: | User name and description of the credentials filed under a product, never the secret value. Results show the user name. | Credentials, searched for the user name |
Click a result, or press Enter for the first one. No matches found means nothing matched; Search is unavailable means the search itself failed — try again, and if it persists, see Troubleshooting.
Search requires at least three characters. Shorter terms return nothing rather than everything.
This is the fastest way to answer "have we seen this host / CVE / credential before?" without knowing which product it was filed under. For searching within a single view, each page has its own filter — Scan History, Assets and Vulnerability Management all search their own records.
Audit logs
Security-relevant activity in a team — member and account changes, sign-in configuration, integrations, policies and report downloads — is recorded in the team's activity log, which team admins read on the Activity tab of the Teams page.
See Security logs for the team and system logs, and Troubleshooting for the container and service logs that live on the host rather than in the console.
Last reviewed 2026-10-19