Map and test your attack surface
Your internet-facing estate is mapped and scanned with consent, and you know the routes to your crown jewels.
- 1ATLASAdd an organisation
Add the organisation with the wizard
Choose the organisation button at the top right of the header.
Open this step → - 2ATLASAdd an organisation
Name the organisation and add its domains
The step is headed "Who are we mapping?".
Open this step → - 3ATLASScope and consent
Understand the three conditions for scanning
ATLAS sends nothing to an organisation's systems until three conditions hold:
Open this step → - 4ATLASScope and consent
Prove you own each domain
Before ATLAS scans anything under a domain, the organisation must prove it controls that domain. The usual proof is a DNS TXT record.
Open this step → - 5ATLASScope and consent
Record the scanning mandate
The mandate is the organisation's written permission for active reconnaissance: port scans, service identification and similar checks that send network traffic to its systems. Passive reconnaissance and vulnerability lookups never touch…
Open this step → - 6ATLASScans
Check that scanning is allowed
The top of the Scans page always shows whether active scanning may run. The headline reads, for example, "Active scanning is authorized for every domain in scope", "Active scanning is authorized for 4 of 5 domains", or "Active stages…
Open this step → - 7ATLASScans
Start a scan
Open Scans. On the Activity tab, choose Start a scan. The Start a scan dialog opens.
Open this step → - 8ATLASThe Map
Follow the scan on the map
While a scan runs, a pill on the Map shows its name and progress. Choose Watch on map to switch to the Live scan view. It counts the hosts Scanned, Scanning now and Queued, and those that are passive only because ownership is not proved…
Open this step → - 9ATLASThe Map
Mark your crown jewels
A crown jewel is a system the organisation cannot afford to lose, such as the patient records database or the domain controller. Attack paths are routes from the internet to a crown jewel, so marking them well makes every other view…
Open this step → - 10ATLASFindings and attack paths
Ticket or accept findings
Open Findings in the header. The summary next to the heading reads, for example, "20 open · 4 critical · 1 accepted".
Open this step → - 11ATLASFindings and attack paths
Follow the routes to your crown jewels
An attack path is a route from the internet to a crown jewel, hop by hop through your hosts. For each path ATLAS names the cut point: the hop where one fix removes the whole path.
Open this step → - 12ATLASInventory and reports
Export a posture report
Open Reports in the header. The heading shows the organisation and today's date.
Open this step →