Detected country: US

Getting Started

How to get started with Cobalt

Assets

Assets are what we pentest
Asset Types
Create an Asset
Risk Advisories

Pentests

Pentests
Create a Pentest
Create an Autonomous Pentest
- Launch a Saved Autonomous Pentest
- Review a Closed Autonomous Pentest Report
Pentest Process
Pentest States
Coverage Checklist
Pentest Expectations
In House Pentests
- Complete an In-House Pentest (For Pentesters)
- Set Up an In-House Pentest
Findings
Reports
Preparation

Engagements

Engagements Overview
Digital Risk Assessment
Secure Code Review

Findings

Findings

Insights

Insights

Planning

Planning

Methodologies

Cobalt Methodologies Overview
Web Methodologies
Autonomous Web Methodologies
API Methodologies
External Network Methodologies
Internal Network Methodologies
Mobile Methodologies
Cloud Configuration Review Methodologies
Cloud Pentest Methodology
Desktop Methodologies
AI/LLM Methodologies
Digital Risk Assessment Methodology
Secure Code Review Methodologies

Attack Surface

Attack Surface Monitoring (ASM)

DAST Scanner

DAST Scanner Overview
Best Practices
FAQ
Integrations
Partial Scans: Reduced Scope
Scans
Sequence recorder
Targets
Target Authentication
Extra Hosts
Blackout Period

User Account

Account Overview
Account Settings
Password Best Practices
Sign In to Cobalt
Troubleshoot Sign-in Issues

Collaboration

Collaboration Overview
Collaborate on Pentests
Groups
Manage Pentest Collaborators
User Roles and Permissions
Manage Notifications

Organization

Organization Overview
Manage Users
Your Cobalt Contract
Configure Organization Settings

Credits

Cobalt PtaaS Tiers
Cobalt Credits
Track Your Credits

Integrations

Cobalt Integrations Overview
Integration Builder
Integrate Jira with Cobalt
Slack
Microsoft Teams
Webhooks
DefectDojo
Kenna Security
Vanta
Carried Over Findings
Create Test Finding
Wiz

Cobalt API

Cobalt API Overview
Create a Personal Cobalt API Token
Get an Organization Token
Revoke Your Personal Cobalt API Tokens
Create or Modify an Asset
Import Findings to Google Sheets

Glossary

Glossary

What's New

August 2026
May 2026
April 2026
March 2026
February 2026
January 2026
November 2025
August 2025
July 2025
June 2025
May 2025
April 2025
March 2025
January 2025
December 2024
November 2024
October 2024
September 2024
August 2024
July 2024
June 2024
May 2024
April 2024
March 2024
January 2024
Product Updates

‌
‌
‌

Powered by

Assistant

Ask new question

Powered by

Methodologies

Home
Methodologies

Cobalt Methodologies Overview Web Methodologies Autonomous Web Methodologies API Methodologies External Network Methodologies Internal Network Methodologies Mobile Methodologies Cloud Configuration Review Methodologies Cloud Pentest Methodology Desktop Methodologies AI/LLM Methodologies Digital Risk Assessment Methodology Secure Code Review Methodologies