Welcome to Strobes

This guide gives you a quick tour of the platform so you know what each area is for and where to go next. It is written for someone who has just signed in for the first time.

Strobes is a continuous threat exposure management (CTEM) platform. It brings your assets, vulnerabilities, attack surface, and testing activities together in one place, so your team can see what is exposed, prioritize what matters, and track remediation from discovery to fix.

The main areas of the platform

Assets and Findings

Your Assets are the things you protect: applications, network devices, cloud accounts, code repositories, and more. Understanding and managing assets in Strobes explains how to onboard and organize them.

Findings is the umbrella term for everything Strobes surfaces about your posture, whether it comes from a scanner, a pentest, or your attack surface. Every finding is either an Alert or a Vulnerability. See Alerts vs. Vulnerabilities vs. Findings to understand the difference, and Understanding the Findings Toolbar to learn how to triage them.

Strobes ranks findings with a priority score and lets you set SLA policies so deadlines are assigned and tracked. See Prioritization Rules and Configuring SLA.

Attack Surface Management

Strobes ASM continuously discovers and monitors your external-facing assets, then flags exposure such as open ports, exposed domains, phishing pages, and expired certificates before attackers find them. Learn how to configure it in Configuring Attack Surface Management.

Scanners

Strobes includes its own built-in scanners, including SAST, DAST, and SCA, which you can run directly from the platform. See Configuring Strobes SAST, Configuring Strobes DAST, and About Strobes SCA.

You can also connect third-party scanners such as Burp Suite, AppScan, Tenable, and Qualys, and bring their findings into Strobes. See Initiating a Burp Scan and Connecting Tenable IO to Strobes for examples.

Agentic Pentesting

Strobes runs AI-driven penetration tests in workspaces. An agent plans and executes the assessment against your target, and you supervise the results. Start with Initiating an AI Pentest and What is a workspace?.

Strobes AI

Strobes AI is the platform's analyst. You can ask natural-language questions about your security posture, prioritize vulnerabilities, and trigger workflows from the AI Overview page. See AI Overview page and AI agents overview.

PTaaS and Engagements

For human-led testing, Strobes supports Pentesting-as-a-Service through engagements: scoped security assessments with defined assets, services, and timelines. See Creating an Engagement and Managing Engagement Prerequisites.

Dashboards and Reports

Dashboards visualize your security data across prioritization, risk, pentesting, and attack surface. See Introduction to Dashboards and Creating and Managing Dashboards. Every report generated across the platform lands in the Reports page, where you can download and manage them. See What's in the Reports Page?.

Automation

Automations watch for triggers and run actions automatically, such as notifying your team about critical findings or creating tickets. You can build them from templates or from scratch. See Using Automation Templates and Creating a New Automation.

Integrations

Connectors bring data in from your existing tools, including vulnerability scanners, ticketing systems, and cloud platforms. See Connecting Tenable IO to Strobes and Configuring Azure Boards Integration with Strobes for examples.

Administration

Under Administration you manage your organization details, invite team members, and control roles and permissions. See Invite Members and Manage Roles in Strobes and Editing organization details.

Where to go next

To get value from Strobes in your first week, work through these steps in order:

1. Set up your organization. Confirm your organization details under Settings. See Editing organization details.
2. Invite your team. Bring in the people who will triage and fix findings, and assign roles. See Invite Members and Manage Roles in Strobes.
3. Add your assets. Onboard the applications, networks, and cloud accounts you want to protect. See Onboarding Assets.
4. Connect a scanner. Bring in findings from a scanner you already use, or run a Strobes scan. See Connecting Tenable IO to Strobes or Configuring Strobes DAST.
5. Run a first AI pentest. Launch a workspace to test a target. See Initiating an AI Pentest.
6. Triage findings. Review what has surfaced and prioritize what to fix. See Understanding the Findings Toolbar.
7. Build a report. Generate a report to share with stakeholders. See What's in the Reports Page?.