> For the complete documentation index, see [llms.txt](https://copilot-docs.bugbase.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://copilot-docs.bugbase.ai/enterprise/modules.md).

# Modules

Modules contain assessment launch and result-review workflows.

## Web Assessment

| Page               | Use it for                                                                                                                         |
| ------------------ | ---------------------------------------------------------------------------------------------------------------------------------- |
| **Run Assessment** | Choose Discovery, Assessment, or Discovery + Assessment; configure scope, authentication, traffic, attack vectors, and automation. |
| **Statistics**     | Review aggregate external results.                                                                                                 |
| **Attack Paths**   | Triage external findings and retest them.                                                                                          |

## Network Assessment

| Page               | Use it for                                                                                                                                      |
| ------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------- |
| **Run Assessment** | Choose Discovery, Assessment, or Discovery + Assessment; select the agent, subnet or cloud scope, exploit families, safeguards, and automation. |
| **Statistics**     | Review aggregate internal and cloud results.                                                                                                    |
| **Attack Paths**   | Triage internal and cloud findings and retest them.                                                                                             |

Cloud assessment uses Network Assessment. Discovery detects provider scope from the workload identity attached to the selected cloud-hosted agent.

{% content-ref url="/pages/cycdJfiZOF1JvOhhmyH7" %}
[Run a Cloud Assessment](/enterprise/how-to-trigger-a-cloud-assessment.md)
{% endcontent-ref %}

## Code Assessment

| Page               | Use it for                                                                                                   |
| ------------------ | ------------------------------------------------------------------------------------------------------------ |
| **Run Assessment** | Select repositories and branch, PR, tag, or commit targets; configure checks, automation, and the final run. |
| **Statistics**     | Review severity, category, repository, and trend summaries.                                                  |
| **Attack Paths**   | Triage confirmed source, dependency, secret, authorization, and business-logic findings.                     |
| **SBOM**           | Review inventory verification and download SPDX, CycloneDX, and AI-BOM exports.                              |

## Before Starting

Confirm:

* target scope and activity are authorized;
* required agents or the GitHub App are connected;
* authentication and branch/commit selections are intentional;
* rate limits, exploit families, and runtime warnings are acceptable;
* the final Review matches the intended run or schedule.

Monitor execution under **Activity** and manage existing schedules under **Activity -> Schedule**.