Skip to main content
Coverage is the inventory of your organization: the repositories Enclave reads, the applications it found, and the resources and identities in your cloud. Use it to check what Enclave can see.

Tabs

To rescan your cloud now, click Analyze Environment. This needs at least one code and one cloud integration.

Repositories

Each row shows the repository’s Importance (its highest attack-surface risk), its Findings, and its PR Reviews switch. Click a repository to open it:
  • Overview shows its properties and links to other assets.
  • Code architecture shows the map Enclave built: the components of your code, and the attack surfaces an attacker could target.
  • Pull requests lists synced pull requests and their findings.
To rebuild a repository’s map, click Re-analyse on its Code architecture tab.

Start a hunt

A security hunt looks for vulnerabilities in a repository, one attack surface at a time. Open the repository’s Code architecture tab and click Start hunt. Enclave opens a Research session with the repository attached. Pick the attack surfaces to cover, and the findings appear in Risk. See Security hunt.

Applications and cloud assets

Enclave finds applications from the Dockerfiles and static-site configs in your repositories, and links them to the cloud resources they run on. Click any asset to see its properties and relationships. Owners and admins also see a Change history tab with what changed over time.