Refresh

A public exploit now exists for findings already in your environment — no rescan needed.

Review now →

Threat level

—

Loading posture…

Critical

–

Open, unresolved

High

–

Open, unresolved

Medium

–

Open, unresolved

SLA Overdue

–

Past deadline

Known-exploited

–

On CISA KEV

Active findings — last 30 days

Severity mix

Findings by source

Scan activity All scans →

OWASP Top 10 (2021)

ASVS 4.0 coverage

Top findings by priority

View all →

Incident	Pri	Severity	Title	Source	Location	Status

Single

Bulk paste

CSV upload

Discover

Value

Kinddomainsubdomainipapirepoaws_account

Tags

+ Add target

Paste values (one per line or comma-separated) — kind is auto-detected

Tags (applied to all)

Force kind (optional)auto-detectdomainsubdomainiprepo

+ Add all

Discover subdomains for a root domain (Subfinder)

Discover & add

Found subdomains are auto-added as subdomain targets, tagged discovered. This can take up to a minute.

Upload CSV — header row with value, optional kind, tags

Import CSV

Example: value,kind,tags → api.mapup.ai,subdomain,"prod,external"

Targets

Scan all

Name	Kind	Tags	Findings	Scans	Actions

Total assets

–

Under management

Internet-facing

–

Domains, subdomains, IPs

At risk

–

Facing assets with med+ findings

Asset types

–

Distinct kinds

Assets by risk

Internet-facing only All assets At-risk only

Asset	Kind	Exposure	Risk	Findings	Overdue	Tags

Scan a mobile app

Upload an Android .apk or iOS .ipa. MobSF runs static analysis (code, manifest, network-security config, certificate) and the results flow into Findings with OWASP/ASVS tags like every other scan.

Upload only Upload & scan

Mobile apps

App	Scans	Findings	Actions

AWS account

–

region

Cloud findings

–

Prowler + GuardDuty

GuardDuty

–

Runtime threats

Config posture — Prowler

Scans your AWS account against hundreds of CIS/best-practice checks (IAM, S3, security groups, encryption). Findings are OCSF-normalized into the register.

Region Loading regions…

Scan one region at a time — Prowler holds every discovered resource in memory, so account-wide runs can exhaust it.

Priority — skip the queue Run Prowler scan

Runtime threats — GuardDuty

Pulls active GuardDuty detections — compromised credentials, crypto-mining, recon, exfiltration. The "someone is attacking us now" signal that config scans can't see.

Priority — skip the queue Pull GuardDuty findings

Cloud findings

Open in Findings →

All severitiescriticalhighmediumlowinfo All AI verdictsLikely false positiveConfirmed realNeeds review

Incident	Sev	Pri	Title	OWASP	Location	Status

Organization

–

GitHub org

Alert findings

–

Code scanning + Dependabot

Last sync

–

Pulled from GitHub

GitHub security alerts

Pulls org-wide code-scanning (CodeQL) and Dependabot alerts into the unified register, deduplicated and OWASP-tagged like every other source. Uses your GITHUB_TOKEN (or a GitHub App).

Sync alerts now

Repositories

Pick repos to track as code targets — they become scannable with SCA, SAST, secrets and IaC checks.

Load repos Add selected

Click Load repos to list repositories in your org.

	Repository	Visibility	Language	Last push	Status

GitHub findings

Open in Findings →

All severitiescriticalhighmediumlowinfo All AI verdictsLikely false positiveConfirmed realNeeds review

Incident	Sev	Pri	Title	OWASP	Location	Status

Run a scan

Pick a target — Shield suggests the scanners that fit it.

☁ Cloud ⎇ GitHub ⚡ Emerging-threat sweep ↻ Update Nuclei templates

1

Target

2

Scanner All applicable scanners (recommended) Nuclei — CVEs & misconfigurations ZAP — web app DAST Nmap — ports & services testssl.sh — TLS/SSL config API security — headers, CORS, auth Trivy — dependencies, images, repos Semgrep — SAST (code) Gitleaks — hardcoded secrets Checkov — IaC misconfiguration

Intensity Standard — fast Aggressive — full sweep

Priority — skip the queue Run all

Import an existing report

Target

Sourcenucleizaptrivyprowlernmapsemgrepgitleakscheckovtestsslapisecguarddutyosv

File path (in /imports)

Import

Continuous monitoring schedule Scheduler →

Baseline coverage that runs without configuration. Set the cadence here; build anything more specific — a single target, one scanner, a UTC window — in the Scheduler.

Remediation SLA policy

Days to remediate by severity. Applies to findings created after a change; info has no SLA.

Scan history

All statusrunningqueuedcompletedfailedcancelled Clear queued

#	Target	Source	Status	Started	Duration	Findings

← Back to scans

Select a discussion.

Assigned to me

–

Open or triaged in your queue

Overdue

–

Past SLA deadline

Under review

–

Your findings, disputed

Waiting on me

–

Disputes you can decide

Assigned to me 0

Awaiting my review 0

Raised by me 0

Actionable Everything

Export my work

ID	Severity	Title	Priority▼	Status	SLA	Assigned	Actions

All Pending Approved Rejected

Current 0

Triaged 0

Snoozed 0

Noise 0

Fixed 0

All

Clean noise Export CSV

Search

SeverityAllcriticalhighmediumlowinfo

StatusAllopentriagedresolvedfalse_positiveaccepted_risk

SourceAllnucleizaptrivyprowlernmapsemgrepgitleakscheckovtestsslapisecguarddutygithubosv

SLAAllOverdueDue soonOn track

AI verdictAllLikely false positiveConfirmed realNeeds review

OWASPAllA01 Access ControlA02 CryptographicA03 InjectionA04 Insecure DesignA05 MisconfigurationA06 Vulnerable ComponentsA07 Auth FailuresA08 Integrity FailuresA09 Logging FailuresA10 SSRF

Group by type Clear

Preview Apply to all shown

Clear Assign to… Set status… Open Triaged Fixed

	Incident	Sev	Pri	Title	Source	Owner	Age	SLA	Status

Generate report

Scope A single target All targets with tag

Target

Tag

Generate report

Branded PDF with the MapUp logo, severity charts, and a findings table. Retained on the server and shareable via link. A tag report aggregates findings across every target carrying that tag.

Share links

Report	State	Opened	Expires	Created by	Actions

Saved reports

Target	Generated	Formats	Actions

New schedule

Name

Scope A single target All targets with tag

Target

Tag

Every 6 hours 12 hours Day 3 days Week 2 weeks Month

Intensity Standard Aggressive

Run between (UTC, optional)

and

Scanners — leave all unchecked to auto-pick per target type

Create schedule Cancel

Schedules

Name	Scope	Scanners	Cadence	Last run	Next run	Actions

My profile

Change password

Current password New password Update password

Two-factor authentication (MFA)

Scan with your authenticator app, then enter a code:

Confirm & enable

API keys

Scoped keys for dashboards, exports, and CI. read keys view data; write keys can also run scans and triage. View API docs →

+ New API key

Key name

Scope read — view data only write — can also run scans & triage

Generate key

Write keys can change data. This key will be able to start scans and triage findings as the analyst role. It still cannot manage users or other API keys. Only issue one to a system you control, and revoke it as soon as it is no longer used.

Name	Key	Scope	Owner	Last used	Created	Status

Users & access

+ New user

Email

Temp password

Roleviewerresponderanalystadmin

Create

User	Notify email	Role	MFA	Status	Actions

Groups & ownership

A group owns repos/targets and, for monorepos, path prefixes. New findings on what it owns are assigned to its members automatically.

+ New group

Group name

Description (optional)

Create

Scheduled email summaries

Recurring findings digest, emailed to a list you choose.

+ New digest

Name

Recipients

Frequency Hourly Every 6 hours Every 12 hours Daily Weekly Fortnightly Monthly

Send at (UTC) Any hour

Severities

Open only Skip if nothing to report

Create Cancel

Name	Recipients	Frequency	Last sent	Next	Status	Actions

Audit trail

Every privileged action — who, what, when, and from where.

All actions Verify integrity Refresh

Time	Actor	Action	Method	Path	Status	IP	Detail

← Back to Settings