External Assets

Declare the public domains and IP ranges that external reconnaissance should scope against.

Settings & administration

External Assets is where you declare your public-facing domains and IP/CIDR ranges so the nightly external-reconnaissance run scopes against the right surface. Declared domains drive certificate-transparency (crt.sh) subdomain enumeration; declared IPs drive Shodan InternetDB lookups.

How to use it

  1. Open Settings → External Assets.

  2. Read the explanation of the nightly recon run and its data sources.

  3. Add owned domains (for example, example.com or app.example.com).

  4. Add owned IP ranges as IPv4 addresses or CIDRs (bare IPs normalize to /32).

  5. (Admin) Click Save once you've made changes.

Tips

  • Domains must be bare hostnames — no scheme or path — with at least one dot.
  • Only admins can edit; others see the list read-only.

Open External Assets in the app

Jump straight to the feature, or browse the rest of the guides.