> For the complete documentation index, see [llms.txt](https://docs.ox.security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ox.security/scan-and-analyze-with-ox/scanning/agentic-pentester-new/reviewing-findings.md). # Target Details ### About Target Details The target details page provides a comprehensive view of an Agentic Pentester assessment target and its results. From this page, you can review discovered endpoints, analyze findings, explore the application's attack surface, and understand how the target is related to connected source code repositories. The page is organized into tabs that provide different perspectives on the assessment: * **Explore**: Provides a high-level overview of the target, including vulnerability summaries, attack surface visualization, repository mappings, and OWASP API Top 10 analysis. * **Sub-Targets**: Displays the URLs and endpoints discovered during assessment and the findings associated with each one. * **Connected Repos**: Displays repositories associated with the target and their related sub-targets. * **Configuration**: Displays the current assessment configuration, including authentication settings, deployment environment, URL exclusions, and custom headers. The header section provides summary information about the target, including the number of findings, deployment environment, connectivity status, and the date of the most recent assessment.
Target summary The header contains: | Item | Description | | ---------------------- | ------------------------------------------------ | | Issues | Number of findings identified for the target. | | Deployment Environment | Development, Staging, or Production environment. | | Connectivity Status | Current connectivity verification status. | | Last Scan | Indicates when the target was last assessed. |
Explore tab The Explore tab provides a high-level overview of the target.
**Overview section** | Item | Description | | ---------------- | --------------------------------------------------------------------------------------- | | Sub-Targets | Displays the number of discovered URLs and the ratio of vulnerable versus secured URLs. | | Issues Breakdown | Displays findings grouped by severity. | | Connected Repos | Displays the number of repositories associated with the target. | **Attack Graph** The Attack Graph visualizes the relationship between the target and its discovered endpoints. Use the graph to: * Understand the discovered attack surface. * Identify vulnerable endpoints. * Explore relationships between endpoints. * Focus investigation on high-risk areas. **OWASP API Top 10** The OWASP API Top 10 section groups findings according to the OWASP API Security Top 10 categories. Use this section to understand which API security categories are most prevalent within the target.
Sub-Targets tab The Sub-Targets tab displays all URLs discovered during assessment.
**Summary Tiles** | Tile | Description | | --------------- | -------------------------------------------- | | URLs Discovered | Total number of discovered URLs. | | Vulnerable URLs | Number and percentage of URLs with findings. | | Issues | Total number of findings identified. | **Filters** | Filter | Description | | ------------ | -------------------------------- | | Aggregate By | Changes how results are grouped. | | Findings | Filters results by finding type. | | Search | Finds specific sub-targets. | **Results Table** | Column | Description | | -------- | ------------------------------------------------------ | | URL | Discovered URL or endpoint. | | Findings | Findings associated with the URL, grouped by severity. |
Connected Repos tab OX analyzes the application from two directions: * Discovers exposed URLs and APIs from the running application. * Builds an API inventory from connected repositories. OX compares endpoints discovered in the running application with APIs identified in the codebase. Verified matches are associated with the target and used throughout assessment and investigation workflows. Repository mapping methods: | Method | Description | | --------- | ------------------------------------------------------------------------------------ | | Automatic | OX automatically identifies repositories that are likely associated with the target. | | Manual | A user explicitly selects repositories to associate with the target. | Repository correlation helps OX: * Understand application logic. * Improve attack planning. * Associate findings with source code. * Identify gaps between deployed applications and the codebase. * Build a more complete API inventory.
**Repository Information** | Column | Description | | --------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Repository Name | Connected repository. | | Sub-Targets | URLs associated with the repository. | | Method |

Repository mapping methods:

| **To add repositories:** 1. Click **Add Repository** to associate additional repositories with the target.
2. Select one or more repositories from the list and then select **Add Repositories**.
Configuration Tab The Configuration tab displays the current target configuration used by Agentic Pentester when assessing the application. Use this tab to review the target settings, authentication method, deployment environment, URL exclusions, and custom headers configured for the target.
| Field | Description | | ---------------------- | ------------------------------------------------------------------------------------ | | Target Name | Name assigned to the target. | | Target URL | URL used as the entry point for the assessment. | | Authentication Method | Authentication method configured for the target. | | Deployment Environment | Environment associated with the target, such as Development, Staging, or Production. | | URL Exclusions | Regular expressions used to exclude URLs from assessment. | | Custom Headers | Additional HTTP headers included in requests generated during the assessment. | Review the Configuration tab when troubleshooting connectivity issues, validating target settings, or confirming the scope of an assessment.
--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.ox.security/scan-and-analyze-with-ox/scanning/agentic-pentester-new/reviewing-findings.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.