> For the complete documentation index, see [llms.txt](https://copilot-docs.bugbase.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://copilot-docs.bugbase.ai/enterprise/attack-surface.md).

# Attack Surface

Attack Surface is the inventory view for root targets, discovered entities, connected agents, and MITRE ATT\&CK mapping.

| Page                | Use it for                                                                          |
| ------------------- | ----------------------------------------------------------------------------------- |
| **Attack Surface**  | Review discovered exposure and inventory summaries.                                 |
| **All Entities**    | Search graph entities across the workspace and inspect their properties.            |
| **Target Entities** | Manage web assessment root targets and other dedicated upload targets when enabled. |
| **Agents**          | Confirm execution workers, reported subnets, interfaces, and capacity.              |
| **ATT\&CK Matrix**  | Review actions and findings that have MITRE ATT\&CK mappings.                       |

Before a run:

* confirm web assessment root targets match the authorization;
* confirm the selected network assessment agent reports only the expected reachable subnets;
* investigate unexpected discovered assets before expanding scope;
* exclude or deny out-of-scope entities and paths;
* confirm required agents are connected.

Network assessment subnets come from agent inventory, cloud scopes come from cloud discovery, and code repositories come from the connected GitHub App. See [Target Assets](/enterprise/attack-surface/target-assets.md) for where each target type is managed.