Skip to main content
A pentest is done by many sub-agents. Each one works on one task, such as testing login, file upload, or access control. The Agent activities and Requests tabs on the application page show this work for one scan. Both tabs use the same assessment selector at the top. Choose a scan to see its data. Retests are not listed.

​
Agent activities

1

Agent map

Every sub-agent in the scan is shown as a numbered bubble. Agents that found a confirmed issue can be clicked. The other agents are shown so you can see how much work was done.
2

Activity list

Lists the agents that found confirmed findings. Open an agent to see its findings.
3

Reproduction steps

For each finding, you see the proof of concept as ordered steps, with the commands and the output the agent saw. Each finding links to its detail page.
Only confirmed findings are shown here. Ideas the agent tested and dropped are not shown.

​
Requests

The Requests tab lists the HTTP requests the agent sent to your application during the scan. Requests are grouped by endpoint. Open a request to see the request and the response. Use it to check what was tested and to find the request behind a finding.
The Agent activities and Requests tabs are not turned on for every organization yet. If you do not see them, contact us.