ATLAS

ATLAS maps what your organisation exposes to the internet, finds what is dangerous about it, and shows the routes an attacker could take from the internet to the systems you cannot afford to lose. It reads public records without touching your systems, and once you have signed a mandate and proved that you own a domain or address, it also scans your hosts and services directly.

Who uses it

ATLAS has two roles. Your account menu (the initials at the top right) shows which one you have.

Role	What they do here
admin	Everything a user can do, plus: generate launch codes, record an ownership attestation, and record or withdraw an intrusive-testing authorisation
user	Add organisations and scope items, verify ownership, record the scanning mandate, run and control scans, edit scan profiles, ticket and accept findings, model crown jewels, actors and trust relations, and export reports

If your account menu shows No access, you have no role in ATLAS yet. Ask your ATLAS administrator for access.

People at a managed-service partner usually run ATLAS for several client organisations from one console. Security teams at a client organisation can use the same console for their own organisation.

Before you begin

Know your scope. Make a list of the domains, IP addresses and ranges ATLAS may examine for each organisation. See Domains.

Arrange the mandate. Active scanning needs a signed mandate from someone authorised to give it. Getting that signature can take days, so start early. The Onboarding checklist lists who provides it.

Plan the DNS change. To prove you own a domain, you publish one DNS TXT record. Ask your DNS administrator in good time.

Nothing is scanned until all three conditions hold: a signed mandate, proved ownership of what is scanned, and an address that is reachable on the public internet (unless your organisation has agreed otherwise with Soveryne). Reading public records, called passive reconnaissance, needs only a domain in scope.

Getting around

The header across the top of every page holds the navigation and your personal settings.

Item	What it does
Map	Your estate as an interactive diagram: hosts, domains, the people and adversaries who can reach them, and the attack paths between them. See The Map.
Scans	Whether scanning is allowed, the scan running now, scan history, schedules and scan profiles. See Scans.
Findings	Every vulnerability and misconfiguration ATLAS found, grouped by attack path. See Findings and attack paths.
Attack paths	The routes from the internet to a crown jewel, each with the one fix that cuts it. See Findings and attack paths.
Inventory	Every host as a searchable table. See Inventory and reports.
Reports	The posture overview and the report and CSV exports. See Inventory and reports.
Settings	Scope & consent: what ATLAS may look at, the proofs of ownership, the mandate and the intrusive-testing authorisation. See Scope and consent.

On the right of the header you find:

The scan indicator. While a scan runs it shows the scan's name and progress, for example "Passive recon · 40%". On a wide screen, when nothing runs, it shows when the organisation was last scanned.

EN and NL. Switch the navigation between English and Dutch. ATLAS remembers your choice.

Toggle theme. Switch between the light and dark look. ATLAS remembers your choice.

The organisation switcher. The button shows the organisation you are working on. Choose it to open Switch organization.

Your account menu. Your initials. It shows your name, email address and role, with Return to portal and Log out.

Note

The Dutch interface covers the navigation and the loading messages so far. The rest of each page is in English.

Switch organisation

Choose the organisation button at the top right. It shows the name of the current organisation.

In Switch organization, read the row for each organisation: its kind, a bar showing critical, high, low and clean hosts in proportion, a summary such as "25 hosts · 4 critical", and when it was last scanned.

Choose the organisation you want to work on. Its row reads Current; the others read Open →.

ATLAS remembers the organisation you chose and opens on it next time.

The organisation switcher listing three organisations, each with a severity bar and its last scan

Some organisations carry a Demo label. Their hosts and findings are illustrative, so ATLAS never scans or verifies anything for them. You can explore them and export their reports.

What you can do in ATLAS

Add an organisation with the + Add organization wizard.

Set the scope and record consent: add domains and addresses, prove you own them, and record the mandate.

Explore the Map: hosts, zones, actors, crown jewels and attack paths.

Run and follow scans, and set up scan profiles.

Work through findings and attack paths: ticket them, accept a risk, and find the cut point.

Search the inventory and export reports.

How ATLAS feeds MESH

When your organisation shares an asset register in MESH, the hosts ATLAS discovers appear there. The criticality and crown-jewel marks you set on the ATLAS Map are stored in that shared register, so Command sees the same picture.

How ATLAS protects you

Three conditions before any packet. A signed mandate with a named signatory, proved ownership of what is scanned, and a public address unless your organisation has agreed otherwise. The Scans page shows all three at all times.

Every refusal is logged. When a scan or stage is not allowed, ATLAS records it with the reason, so you can see what was not done and why.

Ordinary scans only observe. They never log in, guess passwords, exploit a weakness or run destructive tests. Checks that would make your hosts call out to an outside server are always off.

Intrusive tests need a second authorisation. Anything that attempts a login needs its own signed, time-limited authorisation that names the hosts it covers. No built-in scan profile contains an intrusive stage.

Your decisions stand. A later scan never reopens a finding you ticketed or accepted.

Secrets are never stored in full. When ATLAS finds a credential exposed on a website, it records only its kind, where it was found and a short fingerprint.

Demo organisations are never scanned.

Troubleshooting

Message	What it means	What to do
"Could not load"	ATLAS could not read your data.	Choose Try again. If it keeps failing, choose Log out and sign in again.
"Business context is still loading. Criticality and crown jewels will appear when it arrives."	The shared asset register is still answering.	Wait a moment. The rest of the page already works.
"Business context is unavailable, so criticality and crown jewels are not shown."	ATLAS could not reach the shared asset register.	Reload the page later. Hosts and findings are still correct.
No organization yet / "Add one to begin"	No organisation exists yet in your ATLAS workspace.	Choose + Add organization. See Add an organisation.
No access / "Ask an ATLAS admin for access"	You have no role in ATLAS.	Ask your ATLAS administrator for access.
"Refused by the platform."	Your role does not allow this action.	Ask someone with the admin role.

← PreviousReport phishing from Outlook Next →Add an organisation