If you head to Targets > Discovery you'll find a list of all the assets we've discovered – some of which you may want to add for scanning.
Cloud detection
Available on Pro, Premium and Vanguard
Should you add a target that belongs to a cloud account that is yet to be added, we'll let you know!
Should you hit +Add integration, you'll be walked through the standard steps:
If you hit No thanks, that cloud prompt will disappear, as shown below:
Target Recon
Available on Premium and Vanguard
This section will highlight key findings from targets already added to your account, including additional domains and subdomains that might be related to those added as well as and Login Pages or APIs that have been detected.
Domain detection
This is a list of domains relating to existing apex domains that have been added to the portal. ie. if you have added exampletest.com, we might return exampletester.com or exampletest.co.uk. When clicked, you'll see something like this:
From this page, you have the option of sorting the page by:
Domain (the newly discovered domain)
Related domain (the existing target)
Confidence (how confident we are the detected domain is related to your existing target).
As well performing a number of actions, including:
Adding a missing domain
Add the discovered targets
Exporting the list as a CSV file
Excluding targets from list
More information on this feature can be found in this article.
Subdomain detection
This is a list of all the subdomains we found related to targets already added to your account. When clicked, you'll see something like this:
If you click the dropdown, you'll see the full list of targets found, with options to + Add target, Exclude or Undo exclude:
More information on this feature can be found in this article.
Login detection
If our automated detection tools have found what we think is a login page, you may need to add authentication in order to scan this asset properly. If you have an application license available, you can do this immediately; if you don't, you'll need to purchase one.
API detection
Any targets on this list are here because our detection tools have found an API present on the asset. The addition of an API schema could improve scan coverage and ensure that the APIs are scanned with application checks (requires an application licence)
Cloud integrations
Available on Pro, Premium and Vanguard
This is where you can find previously added cloud accounts and all the associated cloud assets supported by Intruder. (In the screenshot below, all assets have been added for scanning). For more information on integrating your cloud accounts, please head here.
