> For the complete documentation index, see [llms.txt](https://docs.ox.security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ox.security/scan-and-analyze-with-ox/scanning/agentic-pentester-new/adding-targets.md).
# Adding Targets
Before an Agentic Pentester can assess an application, you must create a target.
You must ensure that OX can access the application. If the application is protected by firewalls, allowlists, or similar controls, complete the required network configuration before proceeding.
### Step 1: Create a target and connect repositories
First, you need to configure a new target, and then you can add repositories. Agentic Pentester combines live application testing with source code intelligence.\
You can add repositories as a part of the adding target process, or later from the **Connected Repos** tab.
**To add a new target and connect repositories:**
1. On the **Agentic Pentester** page, click **Add Target**.
2. Enter the target information.
| Parameter | Description |
| --------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Target Name | The name used to identify the target in OX. |
| Description | Optional description of the application or API. |
| Target URL | URL of the web application or API that Agentic Pentester will assess. |
| Authentication Method |
Defines how Agentic Pentester authenticates to the target, as follows: - No authentication: Used for publicly accessible applications that do not require login credentials. - Username and Password: Used for applications that require simple authentication. In addition to Username and Password you can define an optional parameter, Login URL, which can be different from the Target URL. For example, an application might use a dedicated sign-in page.
|
| Deployment Environment (optional) | Indicates whether the target belongs to a Development, Staging, or Production environment. |
| Custom Headers (optional) | Additional HTTP headers included in requests generated by Agentic Pentester. |
| URL Exclusions (optional) | URLs or URL patterns that Agentic Pentester should exclude from testing. |
3. Select **Next**. The Connected Repositories (Recommended) dialog appears.
4. Select one or more repositories associated with the application.
3. Select **Add Repositories**.
4. Select **Add Target**.
### Step 2: Verify Connectivity
After the target is created, OX performs a connectivity verification check.
The verification process confirms that:
* The target is reachable.
* Authentication credentials are valid.
* Login flows work correctly.
* Required configuration is complete.
#### Connectivity Statuses
| Status | Description |
| --------------------- | ---------------------------------------------------------- |
| Connectivity Verified | OX successfully connected to the target. |
| Pay Attention | OX detected a configuration issue that should be reviewed. |
| Authentication Failed | OX could not authenticate to the target. |
When connectivity verification succeeds, the target is ready for assessment.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://docs.ox.security/scan-and-analyze-with-ox/scanning/agentic-pentester-new/adding-targets.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.