Workbench guide

On this page

Workbench is the customer workspace for Eresus Guard. Open the route provisioned for your organization, then use the left navigation to move between projects, assessments, findings, and administration.

#Choose a project

Open Project spaces to select or create the project that owns the target or repository. The project's authorization, assessment history, findings, and evidence stay together.

Project spaces page showing a project and the New project action
Project spaces page showing a project and the New project action

#Set up an assessment

Use Assessment setup to define the target and scope, optional test-user references, allowed domains, source binding, safety limits, execution settings, and summary. Saving records the setup but does not start a scan.

For a network assessment, confirm that the project already has reviewed authorization and included scope. For a repository-only assessment, connect or select a project repository and pin the revision. Repository binding does not authorize network testing. After saving, start a network scan or source analysis with its separate action; Workbench rechecks current readiness before it starts.

Assessment setup showing the target selection step in the eight-step workflow
Assessment setup showing the target selection step in the eight-step workflow

For source repository connections, open Source repositories under Authorized surface. For existing HTTP traffic or API specifications, use Import traffic, titled Ingest.

Source repositories page with GitHub, GitLab, and Add repository options
Source repositories page with GitHub, GitLab, and Add repository options
Import traffic page with HAR, OpenAPI, Postman, cURL, URL list, and raw request inputs
Import traffic page with HAR, OpenAPI, Postman, cURL, URL list, and raw request inputs

#Follow runs and review results

Scan journal shows saved network scans for the selected project, including status, finding counts, and start time. It also provides access to schedule information when available. Source analysis runs appear under Agent assessments.

Scan journal with scheduled-scan controls and the project scan-history table
Scan journal with scheduled-scan controls and the project scan-history table

Open Findings register to filter and review results. Open a finding before assigning, exporting, or retesting it. Check its linked HTTP Records or OAST Interactions when available.

Captured requests in Proof opens HTTP Records, the request and response record list for the project. Out-of-band callbacks opens OAST Interactions. Review a callback with its related finding before drawing a conclusion.

HTTP Records page under Captured requests
HTTP Records page under Captured requests
OAST Interactions page under Out-of-band callbacks
OAST Interactions page under Out-of-band callbacks

#Inspect workspace tools

Detection rules opens the Modules catalog. Search it to review module type, severity, and reported scope. Scanner extensions is a separate workspace area; seeing an extension in its list does not confirm that it ran in a particular assessment.

Modules catalog showing active and passive detection modules
Modules catalog showing active and passive detection modules

Connections & settings opens workspace settings for Integrations, SLA policy, Workspace, Privacy center, and Billing. Access & audit opens Administration, where administrators manage Users & roles, Authentication, and API keys. Ask your workspace administrator if a section is unavailable.

General Workbench Settings page with Integrations, SLA policy, Workspace, Privacy center, and Billing
General Workbench Settings page with Integrations, SLA policy, Workspace, Privacy center, and Billing
Request access

Need a workflow that is not documented here? Email contact@eresussec.com.