Skip to main content
Use the Production Knowledge section of the web app to browse the knowledge graph. Each page shows one type of asset. The Explorer shows how all assets connect. A page shows data after you connect its source. Before that, the page tells you which integration to connect.

​
Apps

Apps shows the applications that Tolmo found in your code repositories. Each app shows its endpoints and the hostnames that serve it. Tolmo marks an app as network-serving when its source declares an HTTP or API surface. This label does not prove that the app is reachable from the internet. Requires a connected code repository (GitHub or GitLab).

​
HTTP endpoints

HTTP endpoints shows all routes that your applications declare. You can search by path, domain, method, or repository. For each endpoint, this page shows the data from the agents: Use this page to check testing coverage. The routes with the Not tested yet label show where the next runs can find new issues. Requires a connected code repository.

​
Datastores

Datastores shows the databases and object storage in your cloud accounts. Tolmo classifies each datastore by the type of data in it. Examples are credentials, financial data, health data, and identity references. Use this page to find where a breach can cause the most damage. Requires a connected cloud provider.

​
Domains

Domains is your domain inventory. It shows apex domains and their hosts. For each domain, it shows the DNS status, the web status, the first and last seen times, and the discovery source. You can export the inventory. Administrators also enable or disable offensive testing for each domain on this page. See Define scope. Requires a connected cloud or DNS provider.

​
Explorer

The Explorer shows the graph. You can show the resources of one integration, or a sample of all resources. To show only new or stale resources, filter by type, first seen, or last seen. From a resource, you can expand to its connections. The time machine shows the graph in a past time window. It shows the resources that Tolmo added and removed. See Time machine.
Use the Explorer for open-ended browsing. For a question that you ask frequently, write a Cypher query. An example question is “every public bucket a role with admin rights can read”.