Skip to main content

​
MindFort User Guide

This concise guide summarizes the current MindFort dashboard. The published guides in this repository contain the full workflows.

​
Getting Started

  • Sign in with your organization account.
  • If you belong to multiple organizations, switch organizations from Settings → Team.
  • After sign-in and organization setup, MindFort opens Overview at /dashboard.
The main sidebar contains:
  • Overview
  • Assessments
  • Findings
  • Code Review when enabled for your organization
  • Coverage (Beta)
  • Agents
  • Analytics
  • Target Inventory
  • Infrastructure when enabled for your organization
  • Knowledge Lakes
  • Reporting
The sidebar footer contains Settings, Billing, and Docs.

​
Assessments

Click New Assessment in the sidebar to start or schedule an autonomous penetration test.
  1. Select a target.
  2. Optionally select stored credentials.
  3. Run immediately or configure a schedule.
  4. Choose a method:
    • Balanced — approximately 6 hours
    • Deep — approximately 8 hours
    • Ultra — approximately 12 hours
  5. Start the assessment.
The Assessments page groups runs into Active, Scheduled, and Historical sections. Open this page to monitor or cancel active runs and to pause, resume, or delete schedules. The public API and CLI values turbo, balanced, and deep map to the dashboard labels Balanced, Deep, and Ultra, respectively.

​
Findings

Open Findings to triage results across all targets.
  • Use the target dropdown to show All Targets or one target.
  • Search findings by keyword and filter by severity.
  • Switch between Open, Resolved, and Archived.
  • On the Open tab, use Secured to include or hide informational secured probes.
Open a finding to review its evidence, impact, proof-of-concept details, and remediation guidance. Depending on your integrations and organization features, you can assign an owner, comment, create a Linear or Jira ticket, click Patch to open the Create Patch dialog, archive, delete, or retest.

​
Agents

Use Agents for directed security work that needs your instructions or approval.
  • Click New Agent to start a run.
  • Save repeated instructions under Templates.
  • Create and manage recurring automation under Schedules.
The legacy /tasks route redirects to /agents. API and CLI resources may still use the technical term task.

​
Target Inventory

Target Inventory contains target cards and target-specific configuration.
  • Organization admins can add targets.
  • Open a target to manage its name, description, authentication, context, coverage, guardrails, and deletion controls.
  • Add stored credentials and login instructions for authenticated testing.
  • Verify domain ownership when required.

​
Reporting

Reporting requires a paid plan.
  1. Open Reporting.
  2. Click Generate Report.
  3. Select a target and submit.
  4. Download or delete reports from the table after generation completes.

​
Integrations and Patching

Open Settings → Integrations to view integrations. Admin access and a paid plan are required to connect them.
  • GitHub enables finding patches and pull requests.
  • Linear and Jira create linked work items from findings.
  • Slack launches Agents from connected channels and supports routing rules.
When GitHub is connected and the target has an associated repository, click Patch on a finding. The Create Patch dialog lets you select the repository and base branch before MindFort creates a pull request.

​
Settings and Billing

Settings tabs include:
  • Profile
  • Team
  • Billing
  • Notifications
  • WAF Configuration
  • Integrations
  • Status
  • API Keys
Billing is restricted to organization admins and owners. It includes subscription, credit, payment-method, and invoice controls.

​
Need Help?