Supported Targets
Cyrion AI tests ten kinds of target. Choose a type in the New Scan wizard, or let Cyrion AI detect it from what you enter.
Cyrion AI tests ten kinds of target. Choose a type in the New Scan wizard, or let Cyrion AI detect it from what you enter.
- Web Application: Live sites and APIs
- Repository: Source code review
- Local Code: Code directories
- IP Address: Hosts and CIDR ranges
- Android APK: Mobile app analysis
- iOS IPA: Mobile app analysis
- AWS: Cloud security audit
- Azure: Cloud security audit
- GCP: Cloud security audit
- AI Application: LLM and AI endpoints
Target types
| Target | What you provide | Covers | Plan |
|---|---|---|---|
| Web Application | A URL such as https://app.example.com | Web apps, APIs, authentication, business logic. Web & Network | Lite |
| Repository | A GitHub, GitLab or Bitbucket URL | Source code, secrets, dependencies. Code Review | Lite |
| Local Code | A code directory | The same review for code that is not hosted. Code Review | Lite |
| IP Address | An address or CIDR range such as 10.0.0.0/24 | Open ports, exposed services, misconfigurations. Web & Network | Lite |
| Android APK | An uploaded .apk file | Static and dynamic app analysis. Mobile Security | Hacker |
| iOS IPA | An uploaded .ipa file | Static app analysis. Mobile Security | Hacker |
| AWS | A stored AWS credential | Identity, storage, network and compute posture. Cloud Security | Red Team |
| Azure | A stored Azure credential | Identity, storage, network and compute posture. Cloud Security | Red Team |
| GCP | A stored GCP credential | Identity, storage, network and compute posture. Cloud Security | Red Team |
| AI Application | An AI endpoint, model or chat interface | Prompt injection, jailbreaks, data leakage. AI Red Team | Red Team |
Registered targets
Every scan is bound to a registered target. Add targets under Targets, including wildcard domains such as *.example.com when you want subdomains covered. A target can be switched off to keep it out of the wizard without deleting it.
| Plan | Registered targets |
|---|---|
| Free and Lite | 1 |
| Hacker | 5 |
| Red Team | 10 |
| Enterprise | Unlimited |
Concurrent scans
| Plan | Scans at once |
|---|---|
| Free and Lite | 1 |
| Hacker | 3 |
| Red Team | 5 |
| Enterprise | Unlimited |
Multiple targets in one scan
Add additional targets to a scan to test related assets together, for example a deployed web application and its source repository. Findings from each are correlated, so a code-level flaw can be matched to the endpoint that exposes it.
Before you scan
- You must own the target or have written authorization to test it.
- Make sure the target is reachable from the internet, or tell us about any allow-listing it requires.
- Prefer a staging environment for your first scans.