Projects and targets
A project is the workspace for one engagement. It holds the targets, runs, and results for that piece of work. A target is what a run assesses.
Before you start
Section titled “Before you start”The first time your team uses ReconForge, an administrator sets up the AI provider. Until that is done, the app opens a short setup step and runs cannot launch. See Connecting your AI model.
Create a project
Section titled “Create a project”Creating and editing projects is an administrator action.
- On the Projects page (the home screen), select New Project.
- Enter a project name. A description is optional.
- Select Create Project.
Open a project to see its tabs: Overview, Targets, Templates, Runs, Usage, Terminal, and Chat. Overview shows target and run counts and the most recent runs.
Add a target
Section titled “Add a target”Adding targets is also an administrator action. On the project’s Targets tab, select Add Target.
- Type: Domain, IP address, URL, or CIDR range.
- Value: the domain, address, URL, or range. The form checks the format as you type.
- Notes: optional. Notes are passed to the agents and influence how they approach the target, so a short note about scope or priorities can help.
Target types by deployment
Section titled “Target types by deployment”- Cloud: you can add Domain and URL targets. IP address and CIDR range are shown but disabled, because the cloud assesses only domains you have verified you own.
- Self-hosted: all four types are available, including internal IP addresses and ranges.
Verify domain ownership (cloud)
Section titled “Verify domain ownership (cloud)”On the cloud, a domain or URL target must be verified before it can be assessed. This keeps assessments limited to systems you control.
- When you add a domain or URL, the Verify domain ownership step opens.
- Add the shown DNS TXT record to that domain. The dialog gives you the record Type, Name, and Value, with a copy button for the value.
- Select Check now. When the record is found, the status becomes Verified and you can assess the target.
DNS changes can take a few minutes to appear. A run against an unverified domain is blocked until verification succeeds.
- Templates: choose the kind of assessment to run.
- Running an assessment: launch and follow a run.