Exploit Graph
The Exploit Graph shows entities and relationships discovered during scans. Use it to understand how a finding was reached and what other assets are connected to it.
What the Graph Contains
Root entities such as domains, subnets, IP addresses, and APK files.
Discovered assets such as web pages, APIs, hosts, services, users, groups, certificates, and cloud resources.
Operational entities such as browser sessions, goals, trajectories, test cases, and test case sets.
Vulnerabilities with severity, CVSS/CWE/CVE metadata, evidence, remediation, and validation state.
Relations showing discovery, execution, containment, use, compromise, or exploit-path links.
Common Uses
Find all assets under a root domain or subnet.
Trace a vulnerability back to the page, API, session, host, or credential that produced it.
Inspect related nodes before marking a finding false positive or duplicate.
Confirm whether a path crossed an expected boundary.
Open a node’s properties for raw evidence and metadata.
Actions
Search for entities by name, URL, IP, label, or identifier.
Click a node to view properties and connected relationships.
Expand a node to load neighbors.
Open attack path drawers from finding pages for a focused read-only path.
Use retest mode from finding pages when fresh validation is needed.
Last updated