🧪 Discover

Discover is the section of the Cloud Console for configuring and running scans that collect inventory and dependency data from the environment, using the deployed and registered appliances.

See How scanning works for what a scan actually collects.

Before You Begin

Discover for public API requires access configuration prior to data collection: - Credentials for those systems, added to a Keychain. - A Scan scope that defines where scans run.

Discover for private network relies on infrastructure configured in each isolated network:

At least one appliance Deployed and Registered.
Network access from the appliance to the systems to scan.
Credentials for those systems, added to a Keychain.
A Scan scope that defines where scans run.

Check the Scanning support matrix to confirm the target systems are supported. If a security team monitors for scanning activity, share Scanning network behavior with them ahead of time.

Discover Workflow

flowchart LR
    A["Create a<br/>Scan Scope"] --> B["Add a<br/>Keychain"]
    B --> C["Configure a<br/>Scan Job"]
    C --> D["Run the<br/>Scan Job"]
    D --> E["Review Results"]

Create a scan scope that defines the IP addresses, ranges, subnets, or hostnames to scan.
Add a keychain with the credentials the appliance uses to access those systems.
Configure a scan job, choosing a Scan job type, the appliance to run it, and an optional schedule.
Run the scan job and monitor its Status and results.
Review discovered systems in Explorer.

Discover Configuration

The Configuration area under Discover holds the resources scan jobs depend on:

Scopes — define where scans run. See Create a scan scope.
Keychains — store the credentials scans use to access systems. See Add keychains.