Configuring Azure Repos Credential Manager

Strobes Credits

Asset Custom Fields

Vulnerability Custom Fields

Submitting a Vulnerability for a Network Asset

Bulk Updating Vulnerability Custom Fields Using CSV

 Enabling SAML Authentication For Your Organization With Google Workspace

Data Retention

Enabling Two-Factor Authentication

How to edit organization details?

Enabling SAML Authentication For Your Organization with Okta

Configuring Threat Intel

Bulk Updating Asset Custom Fields Using CSV

OSS Patches

 How to use toolbar options?

Import Vulnerabilities in bulk using CSV

Configure your SLA policy

 Recurring Vulnerability Logging Rules

Asset Views

How to add assets manually?

How to merge assets?

Assets Custom CSV Export

Editing and Archiving Vulnerabilities

Vulnerabilities bulk actions

 Smart Close while Importing Reports

What are linked assets?

Vulnerabilities Views

Import assets from AWS environment

Engagement Scope

Vulnerabilities View Folders

Getting started with Strobes Pentesting as a service (PTaaS)

Vulnerability State Approvals

Submitting a Vulnerability for a Web/Mobile Asset

Submitting a Code Level Vulnerability

Asset bulk actions

Import assets in bulk using CSV

Smart Close Vulnerabilities

Assets Terminology

Submitting a Web Level Vulnerability

Cloud Security Workflow Configuration Guide

Sync Assets & Vulnerabilities from Tanium to Strobes

Archiving and Unarchiving Engagements

Creating Engagements

Prerequisites for Assessments

Logging Hours for Assessments

How to setup a Cloud scan using Prowler?

Editing Timelines for Individual Assessments

Initiating a Burp Scan

Configuring Tanium Credentials Using Credential Manager

Engagement Summary

Configure Nessus Credential Manager

Sync Assets & Vulnerabilities from Veracode SAST to Strobes

How to Perform Software Composition Analysis in all of your Github Repositories

Configuring Actions in Strobes Automation

Sync Assets & Vulnerabilities from Burp Suite Enterprise to Strobes

Sync Assets & Vulnerabilities from Veracode DAST to Strobes

Services Available on PTaaS

Life Cycle of an Assessment in an Engagement

Configuring Qualys Credential Manager

Configuring Burp Suite Enterprise Credentials Using Credential Manager

Configuring Github Credentials Using Credential Manager

Configuring Bitbucket Credentials Using Credential Manager

Configuring HCL AppScan Credentials Using Credential Manager

Transfer Connector Configurations

Setup email alerts

What is a task?

Configuring AWS Credentials Using Credential Manager

Exporting asset reports

Export vulnerability reports

Configuring Your Git Repo with Strobes

Sync Assets & Vulnerabilities from Snyk Dashboard to Strobes

Configuring Strobes AI for Automated Vulnerability Management

Configuring Snyk Credentials Using Credential Manager

Configuring Burp Credentials Using Credential Manager

Configuring Git Credentials Using Credential Manager

How to use credential manager?

How to manage tasks?

About Asset Inventory connectors

Patch & SLA Summary

Creating Custom Dashboards

Generating PDF Reports

Vulnerabilities Custom CSV Export

Document Vault

How to export reports?

Introduction to Dashboards

Threat Intel Summary

Risk Summary

Asset Summary 

Software Bill of Materials

Software Composition Analysis

SCA & SBOM Workflow Configuration Guide

Container Scanning Workflow Configuration Guide

Smart Close while Running Scans

How to Generate SBOM for all your Github Repositories

How to Identify Secrets in all your Github Repositories

Everything about connectors

Sync Assets from Nessus to Strobes

Initiating an HCL AppScan DAST Scan

DAST Workflow Configuration Guide

Initiating an HCL AppScan SAST Scan

This section lays the foundation for using the platform effectively. Whether you're setting up for the first time or managing users and accounts, these guides will walk you through every core functionality to help you hit the ground running.

Platform Fundamentals 

New here? Set up your workspace and explore key features for a smooth start.

Getting Started 

Manage your account with ease. This section covers how to update account settings, configure preferences, and handle subscriptions or billing—everything you need to personalize your platform experience.

Account Management 

Control who has access to your workspace. Learn how to add users, assign roles, manage permissions, and keep your team organized and secure.

User Management 

Manage, organize, and monitor all your cybersecurity assets in one place. This category helps you understand how assets are added, operated, and tailored to your organization’s unique environment.

Asset Management 

Learn what assets are, how they're discovered, and how to group and classify them.

Asset Basics

Learn how to perform core actions on assets—such as syncing, viewing scan results, updating asset status, and managing lifecycle tasks efficiently.

Assets Operations 

Discover how to customize your asset inventory with tags, business context, risk attributes, and ownership mapping to make prioritization more effective.

Asset Customization

 Learn how to identify, assess, manage, and remediate vulnerabilities using Strobes. This category covers everything from foundational concepts to advanced workflows, helping security teams streamline vulnerability handling and improve risk visibility.

Vulnerability Management

Start here if you're new to vulnerability management. This section introduces core concepts, explains how vulnerabilities are discovered, and outlines the basic structure and lifecycle of vulnerabilities within the platform.

Vulnerability Basics

Dive into day-to-day operations of managing vulnerabilities—like assigning, updating statuses, adding context, and triggering remediation workflows. Ideal for security analysts and engineers responsible for tactical vulnerability response.

Vulnerability Operations

Learn how to group, filter, and categorize vulnerabilities for better tracking and reporting. This section covers tags, views, saved filters, and classification methods that bring clarity and structure to your vulnerability data.

Vulnerability Organization

Unlock the full potential of the Strobes platform by seamlessly connecting with your existing security and IT tools. This section covers everything from managing secure credentials to configuring and syncing third-party connectors—so your workflows remain smooth, automated, and secure.

 Integrations & Connectors

Learn how to securely store and reuse credentials for integrations. This section guides you on setting up OAuth or API-based access to external tools, enabling safe and streamlined connectivity across your workflows.

Credential Management

This section walks you through the steps to configure integrations with third-party platforms like Jira, GitHub, Nessus, and more. Whether you're importing assets, syncing vulnerabilities, or automating tasks, start here to get your connectors up and running.

Connector Setup

Keep your data fresh and relevant. Explore how to sync assets, vulnerabilities, and other security data from integrated tools into Strobes. This section ensures you understand manual and automated sync options for maintaining real-time visibility.

Synchronization

Learn how to run and manage security scans within the Strobes platform. This section covers everything from initiating scans to analyzing the results and integrating them into your workflows. Whether you’re performing manual assessments or leveraging automated scans, these articles will help you get actionable insights quickly.

Scanning and Assesssment 

Explore how to initiate, monitor, and manage various types of security scans across assets. This section includes guides on configuring scan parameters, scheduling scans, and managing scan results efficiently.

Scanning Operations 

Understand how to interpret the findings from your scans. This section explains how vulnerabilities are detected, how severity is determined, and how you can leverage Strobes to contextualize risks based on threat intel and asset value.

Security Analysis

Learn how to automate your scanning and assessment processes using workflows. These articles walk you through setting up scan triggers, integrating with third-party tools, and automating actions based on scan results.

Workflow Configuration

Manage and streamline all your security engagements—right from setup to execution. This section helps you understand how to initiate, operate, and oversee pentesting or security projects efficiently on Strobes.

Engagemet Management

Get started with the fundamentals of setting up and managing security engagements. Learn how to initiate a new engagement, define scope, invite stakeholders, and configure essential settings.

Enagagement Basic 

Dive into the day-to-day activities of managing ongoing engagements. From assigning tasks to tracking progress and closing out findings, this section covers everything needed to run smooth, outcome-driven engagements.

Enagagement Operations

Get complete guidance on leveraging Strobes' Pentesting as a Service (PTaaS) platform. From onboarding to managing findings, this section helps you understand how to streamline, collaborate, and act faster during your security assessments.

Pentesting as a Service

Learn the foundational aspects of PTaaS, including how engagements are initiated, managed, and tracked. This section covers key features, user roles, and how to get started with your first test.

PTaaS Basics

Understand how vulnerabilities are reported by testers, validated, and tracked within the platform. This section also explains how to view submissions, engage with researchers, and manage remediation workflows.

Vulnerability Submission

Manage and streamline all your security tasks efficiently. This section helps you understand how to create, assign, automate, and track tasks within the Strobes platform to improve collaboration and ensure timely remediation of vulnerabilities.

Task Management

Learn the essentials of task management on Strobes. From creating and assigning tasks to understanding task statuses and priorities, this section covers the fundamental workflows your team needs to stay aligned.

Task Basics

Automate repetitive actions to save time and reduce manual effort. This section explains how to set up automation rules that trigger task creation, updates, and assignments based on specific vulnerability or asset conditions.

Task Automation 

Get a complete view of how to generate, customize, and manage reports and documentation within the Strobes platform. This section helps you turn raw data into meaningful insights and maintain critical records throughout your security lifecycle.

Reporting and Documentation

Export reports, use templates and filters, and share findings in formats like PDF or CSV

Reports 

Explore how to upload, manage, and access essential documents such as Statements of Work (SOW), NDAs, or scope definitions. This section explains how to securely store and organize documentation relevant to your engagements in the Document Vault.

Documentation 

The Organization Details section lets you view and manage essential information about your organization, such as its name, industry, and billing information.Depending on your role Owner, Manager, or Member you can perform the following actions:<ul><li>Edit Organization Details</li><li>Transfer Ownership</li><li>Delete Organization</li><li>Leave Organization</li></ul>Each action is explained in detail below.<h3>Edit Organization Details</h3>Who can do this: Owners and ManagersSteps to edit:<ol><li>Navigate to the Settings page.</li><li>Select Organization Details.</li><li>Click the Edit button.</li></ol><img class="image_resized" style="width:86.42%;" src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXe7YfpRn7jrzyDFqNdPIDmot20KCBS43u2w_LLzhwp11RhK6eBr4rfzyLPbYrfY3rJHkdyva8YHmCYU8dedRiZx2YJOEvNNcobd1nEHRqmlZXiCQh3kswWkFOXh2hjF3huS1-5cNw?key=5TLpnrl4YM4AAOyL9M-rKoC8">You can update the following fields:<ul style="list-style-type:disc;"><li>Organization Name</li><li>Industry Type</li><li>Billing Address</li><li>Billing Email Address</li><li>Revenue</li><li>Country</li></ul><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXd0ulUZ8BbXjaF7dhLfZvJP1CvlPI63faeUNV5na5KfKSLpaNkqkZ3Q6NrBitIJi0ixvZAV0ur2ES7aMxwAtx7OjTP-Zr6qpLsUYe4Z0WbgdZrbKvca26hR76hWQpZss__e4Rmhrw?key=5TLpnrl4YM4AAOyL9M-rKoC8">After making the necessary changes, click Save.The updated information will now appear in the Organization Details section.<h3>Transfer Ownership</h3>Who can do this: Only the OwnerRequirements:<ul><li>At least one Manager must exist in the organization.</li><li>Ownership can only be transferred to one Manager.</li></ul><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXd2zoQY3n3ltnVZ5LyqzbZKjv43ClCdh_EjHcIyrRwe5gk3knQlgCWKNuN7dDgn0DistbyutE_tX_2Sqp_FINoa6cAN5Fi5U6v5wBNWwx-lDQuaUWZh4q7uni9btuPZighh7_mRIQ?key=5TLpnrl4YM4AAOyL9M-rKoC8">Steps to transfer ownership:<ol><li>Go to Organization Details and locate the Organization Actions section.</li><li>Click Transfer Ownership.</li><li>Choose a Manager from the list.</li><li>Click Transfer to confirm.</li></ol><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeEE_oycdiuhRSRzfnKoVrTLnhWAhXhjFMqS7j-Fqxw9EUZmG9bmgL8EABe9bC09am7J7KC38KELYjARkW2RMDfaSVvlNpMqRtgzKa_vECQZOA_WyDG9aD6Tsx-5SONs3JBQo8Qww?key=5TLpnrl4YM4AAOyL9M-rKoC8">Ownership will be successfully reassigned to the selected Manager.<h3>Delete Organization</h3>Who can do this: Only the OwnerImportant: This action is irreversible. Deleting the organization will permanently erase all associated data.Steps to delete an organization:<ol><li>Go to Organization Details &gt; Organization Actions.</li><li>Click Delete Organization.</li><li>You will be asked to enter the Organization Name to confirm.</li><li>Enter the name and click Delete.</li></ol><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXe29k3lQ3l42NglwiHKbTDIhpBsCjutVbhTZuJLUpeEvu-xnbvdOMwvKSjuPCm-RarzFhzfKr3eJIkk6GxD9iomkUmh_ULETJQg1A2k01K9lADmCRQ5rg51iRZCdH1SfRvrX4wG9Q?key=5TLpnrl4YM4AAOyL9M-rKoC8">The organization will be permanently deleted.<h3>Leave Organization</h3>Managers and members can leave the organization at any point of time. But, for an owner to leave the organization, he has to first transfer the ownership to one of the existing managers, and only after that he will be able to leave the organization. If you have to rejoin the organization after you have left, a manager will have to invite you to the organization again using your email address.Steps to leave an organization:<img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXddUigD7_LyI17aQB9zNOHl_QVc1250cQMuEnyZjHJMMOJ2v4CGeTSBPwK-e67YkXXZPvXcXpRr3NERziplqkPoNZdB7PxSfBlL4SluDxYejZ7VuDrd4D4UXwBjA6RRyK3c3aDbLw?key=5TLpnrl4YM4AAOyL9M-rKoC8"><ol><li>Go to Organization Details &gt; Organization Actions.</li><li>Click Leave Organization.</li><li>Confirm your choice by clicking Leave on the prompt.</li></ol><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfpYPWeQuxtFSwbgqQddGLk9mFnpyxPbqYQ5rv9OUwt1cYsJ_O0ffRUANf8J1QPQMxTm5jHZwV-lORpzWp6cR__4gHI1h7SiYbU_xOCRZeN1-Sh8cVWSY5OSkNKDEzv9xXhJMcH4g?key=5TLpnrl4YM4AAOyL9M-rKoC8">You will be removed from the organization. To rejoin, a Manager must re-invite you using your email address.

Link:&nbsp;<a href="https://app.arcade.software/share/collections/E3tXfZUbQ9S1DQHibJff">https://app.arcade.software/share/collections/E3tXfZUbQ9S1DQHibJff</a> &nbsp;

Strobes offers powerful automation capabilities leveraging Large Language Models (LLMs) to streamline vulnerability management. This guide will walk you through the process of setting up and configuring Strobes AI to automate your vulnerability triage and analysis workflows.Getting Started: 1. Navigate to the "Create Automation" page in Strobes. 2. You'll see two main options: "Strobes Action" and "Agent LLM". For AI-powered automation, select "Agent LLM".<img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXche8E1MRyMJ7XvAVSlVQm3V7yFXKPDbnvJ2Af-63u5IYhsut8nZbyE-h2RKmxE9d-wS9JS64OouGtpTYsmUgDutlnlqVTBjuoQNyglEHt3c7Mbp0RJb6M5tJvdKyoBIdHGnIwe?key=mGlUpyPavEHNwvzVLbXAo-On" alt="Screenshot 2024-06-25 at 3.52.52 PM.png">Step 1: Configuration Details - Provide a name for your AI agent. - Select the appropriate OpenAI credential from the dropdown. - Choose the AI model type you wish to use. - Select whether to apply this automation to Assets or Findings. - Toggle "Allow multiple agents to perform action" if needed. - Set a weightage value (1-100) to prioritize this automation.<img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXedDjL50Tth0RRJZD4PTwv5Pl59z8MJCJKEjYe3wxEht_KNkdHaicnfpjIhm-lSJkOFLupCjHxrkgeJvdlxJDlCDwVLJGgVsZeRvGP5rRvXmMfEvzepcJoBC1SSy94yYSrC2ZqUxg?key=mGlUpyPavEHNwvzVLbXAo-On" alt="Screenshot 2024-06-25 at 3.53.25 PM.png">Step 2: Instructions - Specify the role for the LLM agent (e.g., "Vulnerability Management Analyst"). - Provide detailed instructions for the AI to follow during the triage process. Be specific about analysis steps, prioritization criteria, and any organization-specific guidelines.<img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfFpWQEET73M6q6qHPCZ0EjohnhVv31CkI377tNkxZaPP_ZzA_KB1K9kY7GDw2135MnAW9NZSPvA17Gi_5wrGhkEUHasQsv_alkjGLm2h0RpimsOS-3jn4aHPTNhsQImWJT_6oilQ?key=mGlUpyPavEHNwvzVLbXAo-On" alt="Screenshot 2024-06-25 at 3.53.48 PM.png">Step 3: Hooks - Select the events that should trigger this automation: - Create: Run on newly discovered vulnerabilities - Update: Run when vulnerability details are modified - Exposure Update: Trigger on changes to exposure status - Business Sensitivity Update: Run when business impact changes<img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXevmIslRP-A8J5CQyT5-16lCGFDXRgnvZZMWqf1XVtJLVfGN0ydcWRkLejoWRf9S9cKvRtGBuKe9Rv1fRd4EayEkWXVfm5Ca74TRpzDf8Kc4ylGKg76Wm_mPbUWCaXjhJUccUN59Q?key=mGlUpyPavEHNwvzVLbXAo-On" alt="Screenshot 2024-06-25 at 3.55.03 PM.png">&nbsp;Step 4: Filters - Use the Strobes Query Language to create filters that determine which vulnerabilities the AI should process. - Click "Add Filter Conditions" to set up complex queries based on various attributes like severity, asset type, or specific CVEs.Best Practices: 1. Start with a focused scope: Begin by automating a specific subset of vulnerabilities or assets to fine-tune your configuration. 2. Refine instructions iteratively: Regularly review the AI's output and adjust your instructions to improve accuracy and relevance. 3. Use clear, concise language: Provide unambiguous instructions to ensure consistent results from the LLM. 4. Leverage filters effectively: Create targeted filters to ensure the AI focuses on the most critical vulnerabilities for your organization. 5. Monitor and adjust: Regularly review the automation's performance and make adjustments as needed.By following these steps, you can harness the power of AI to significantly enhance your vulnerability management process in Strobes. The system will automatically analyze new vulnerabilities, prioritize them based on your criteria, and provide actionable insights to your security team.Remember that while AI can greatly improve efficiency, human oversight remains crucial. Regularly review the AI's output and decisions to ensure alignment with your organization's security goals and risk tolerance.Check out the video <a href="https://app.arcade.software/share/prOewfcXCbEfnsVpCXF2">here</a> &nbsp;

Strobes provides a great number of meaningful insights to help you understand various security aspects of your organization with regard to vulnerability management. Your leadership team will gain a new perspective through many different lenses with the help of the following dashboards:<ul><li><a href="https://help.strobes.co/en/article/risk-summary">Risk Summary</a></li><li><a href="https://help.strobes.co/en/article/asset-summary">Asset Summary</a></li><li><a href="https://help.strobes.co/en/article/patch-sla-summary">Patch &amp; SLA Summary</a></li><li><a href="https://help.strobes.co/en/article/threat-intel-summary">Threat Intel Summary</a></li><li><a href="https://help.strobes.co/en/article/prioritization-rules">Prioritization Summary</a></li></ul>If you would like to have a custom dashboard with your own KRIs and KPIs, please drop in a support ticket or contact your customer success manager. &nbsp;

Go back to application

Was this article helpful?

You recently requested to reset your password for your account. Use the button below to reset it. This password reset is only valid for the next 24 hours.

If you’re having trouble with the button above, copy and paste the URL below into your web browser.

Strobes Security Help Center