diff --git a/content/en/BestPractices/_index.md b/content/en/BestPractices/_index.md index 4c36a3a87..6b7c31ba2 100644 --- a/content/en/BestPractices/_index.md +++ b/content/en/BestPractices/_index.md @@ -1,6 +1,6 @@ --- title: "Best Practices for Security" -linkTitle: "Best Practices" +linkTitle: "Security Best Practices" weight: 600 description: > Recommendations for developers focused on security. diff --git a/content/en/Cobalt-API/create_asset.md b/content/en/Cobalt-API/create_asset.md index 6289a10cd..44f6dc2e1 100644 --- a/content/en/Cobalt-API/create_asset.md +++ b/content/en/Cobalt-API/create_asset.md @@ -2,6 +2,7 @@ title: "Create or Modify an Asset" linkTitle: "Create/Modify an Asset" weight: 140 +aliases: /apiusecases/create_asset/ description: > Run this sequence of REST calls to create an asset. --- diff --git a/content/en/Cobalt-API/get-findings.md b/content/en/Cobalt-API/get-findings.md index 41feb5f98..90b7efae6 100644 --- a/content/en/Cobalt-API/get-findings.md +++ b/content/en/Cobalt-API/get-findings.md @@ -2,6 +2,7 @@ title: "Retrieve Findings and Import Them to Google Sheets" linkTitle: "Import Findings to Google Sheets" weight: 150 +aliases: /apiusecases/get-findings/ description: > Learn how to retrieve all findings using the Cobalt API and import them to Google Sheets. --- diff --git a/content/en/Getting started/pentest-preparation.md b/content/en/Getting started/pentest-preparation.md index 437338e43..b909a2c76 100644 --- a/content/en/Getting started/pentest-preparation.md +++ b/content/en/Getting started/pentest-preparation.md @@ -22,8 +22,6 @@ The information you need to prepare before launching a pentest depends on your [ ## Web Application -Learn [how to scope a pentest for a web app](/getting-started/planning/#web) in the Cobalt UI. - **Information needed to set up your pentest**: - Depending on the type of your web application: @@ -47,9 +45,9 @@ Learn [how to scope a pentest for a web app](/getting-started/planning/#web) in - List of priorities (for example, focus on new features or specific workflows) - Attack vectors you're most concerned about -## Mobile Application +Learn [how to scope a pentest for a web app](/getting-started/planning/#web) in the Cobalt UI. -Learn [how to scope a pentest for a mobile app](/getting-started/planning/#mobile) in the Cobalt UI. +## Mobile Application **Information needed to set up your pentest**: @@ -71,9 +69,9 @@ Learn [how to scope a pentest for a mobile app](/getting-started/planning/#mobil - Product walk-through or documentation, if available - Special requirements for the pentest, if any -## API +Learn [how to scope a pentest for a mobile app](/getting-started/planning/#mobile) in the Cobalt UI. -Learn [how to scope a pentest for an API](/getting-started/planning/#api) in the Cobalt UI. +## API **Information needed to set up your pentest**: @@ -88,9 +86,9 @@ Learn [how to scope a pentest for an API](/getting-started/planning/#api) in the - Documentation, if available: Swagger, Postman, SoapUI projects or OpenAPI files - Special requirements for the pentest, if any -## External Network +Learn [how to scope a pentest for an API](/getting-started/planning/#api) in the Cobalt UI. -Learn [how to scope a pentest for an external network](/getting-started/planning/#external-network) in the Cobalt UI. +## External Network **Information needed to set up your pentest**: @@ -102,9 +100,9 @@ Learn [how to scope a pentest for an external network](/getting-started/planning - High-level overview of the network (preferably, with a network diagram) - Special requirements for the pentest, if any -## Internal Network +Learn [how to scope a pentest for an external network](/getting-started/planning/#external-network) in the Cobalt UI. -Learn [how to scope a pentest for an internal network](/getting-started/planning/#internal-network) in the Cobalt UI. +## Internal Network **Information needed to set up your pentest**: @@ -116,6 +114,8 @@ Learn [how to scope a pentest for an internal network](/getting-started/planning - Special requirements for the pentest, if any - Other considerations that may affect the scope: for example, multiple [jump boxes](/getting-started/glossary/#jump-box) on the network +Learn [how to scope a pentest for an internal network](/getting-started/planning/#internal-network) in the Cobalt UI. + Because Cobalt pentesters execute pentests for internal networks remotely, they need: - Access to the internal corporate network through a stable VPN connection; and @@ -150,8 +150,6 @@ Cobalt pentesters can test services on the following platforms: Each platform includes different categories of services, such as EC2, databases, and machine learning engines. -Learn [how to scope a pentest for a cloud configuration](/getting-started/planning/#cloud-configuration) in the Cobalt UI. - **Information needed to set up your pentest**: - Your cloud platform: GCP, AWS, or Azure @@ -166,6 +164,8 @@ Learn [how to scope a pentest for a cloud configuration](/getting-started/planni - IAM read-only access for pentesters (for example, SecurityAudit and ViewOnlyAccess for AWS) - Special requirements for the pentest, if any +Learn [how to scope a pentest for a cloud configuration](/getting-started/planning/#cloud-configuration) in the Cobalt UI. + ## Combined Assets For an asset that combines multiple asset types, follow the guidelines for each type: diff --git a/content/en/Integrations/Beta/configure-beta.md b/content/en/Integrations/Beta/configure-beta.md index 1c79bf49a..f2f8bca16 100644 --- a/content/en/Integrations/Beta/configure-beta.md +++ b/content/en/Integrations/Beta/configure-beta.md @@ -27,9 +27,9 @@ To configure the integration, complete the following steps: To complete the configuration, you need the following: - **Webhook URL**: URL that is used in the configuration to send integration events. We'll send you your webhook URL in the onboarding email. -- **Organization Token**: Unique organization token used in API calls. We'll send you your organization token in the onboarding email. -- **API Token**: Your personal API token required to authorize access to the Cobalt API. Learn [how to create an API token](/cobalt-api/create-personal-api-token/). -- **Integration Credentials**: Credentials for the connected platform. +- **Organization token**: Unique organization token used in API calls. We'll send you your organization token in the onboarding email. +- **API token**: Your personal API token required to authorize access to the Cobalt API. Learn [how to create an API token](/cobalt-api/create-personal-api-token/). +- **Integration credentials**: Credentials for the connected platform. ## Step 1: Create a Webhook diff --git a/content/en/Integrations/Jira/jira-cloud.md b/content/en/Integrations/Jira/jira-cloud.md index 7f1a4016a..0305caf0a 100644 --- a/content/en/Integrations/Jira/jira-cloud.md +++ b/content/en/Integrations/Jira/jira-cloud.md @@ -12,14 +12,6 @@ Learn how to integrate **Jira Cloud** with Cobalt. The availability of this feat If your organization uses Jira Server or Data Center, see [Jira Server and Data Center Integration](/integrations/jira/jira-server-dc/). {{% /pageinfo %}} -In this article: - -- [Configuration](#configuration) - - [Step 1: Connect the Jira Plugin](#step-1-connect-the-jira-plugin) - - [Step 2: Configure the Integration for a Pentest](#step-2-configure-the-integration-for-a-pentest) -- [How the Integration Works](#how-the-integration-works) -- [Deactivate the Integration](#deactivate-the-integration) - ## Configuration **Required permissions**: diff --git a/content/en/Integrations/Jira/jira-server-dc.md b/content/en/Integrations/Jira/jira-server-dc.md index 2b6edb833..0a2e7e00e 100644 --- a/content/en/Integrations/Jira/jira-server-dc.md +++ b/content/en/Integrations/Jira/jira-server-dc.md @@ -12,15 +12,6 @@ Learn how to integrate **Jira Server** or **Jira Data Center** with Cobalt. The If your organization uses Jira Cloud, see [Jira Cloud Integration](/integrations/jira/jira-cloud/). {{% /pageinfo %}} -In this article: - -- [Configuration](#configuration) - - [Step 1: Connect the Jira Plugin](#step-1-connect-the-jira-plugin) - - [Step 2: Configure the Integration for a Pentest](#step-2-configure-the-integration-for-a-pentest) -- [How the Integration Works](#how-the-integration-works) -- [Attachments Support](#attachments-support) -- [Deactivate the Integration](#deactivate-the-integration) - ## Configuration **Required permissions**: diff --git a/content/en/Integrations/Jira/push-findings.md b/content/en/Integrations/Jira/push-findings.md index 860170068..f0895c313 100644 --- a/content/en/Integrations/Jira/push-findings.md +++ b/content/en/Integrations/Jira/push-findings.md @@ -10,11 +10,6 @@ description: > Learn how auto-push works and how to push findings to Jira manually. {{% /pageinfo %}} -In this article: - -- [How Auto-Push Works](#how-auto-push-works) -- [Push Findings Manually](#push-findings-manually) - ## How Auto-Push Works Once an [Organization Owner](/getting-started/glossary/#organization-owner) or [Member](/getting-started/glossary/#organization-member) has enabled the Jira integration on a pentest, findings start to automatically synchronize with the selected Jira project. The **Auto-Push** option is enabled by default. diff --git a/content/en/Integrations/Jira/troubleshoot-jira-integration.md b/content/en/Integrations/Jira/troubleshoot-jira-integration.md index 9b19ced23..150cd5630 100644 --- a/content/en/Integrations/Jira/troubleshoot-jira-integration.md +++ b/content/en/Integrations/Jira/troubleshoot-jira-integration.md @@ -10,13 +10,6 @@ description: > If you experience unexpected behavior or have issues with Cobalt plugins for Jira, read our troubleshooting tips. {{% /pageinfo %}} -In this article: - -- [Common Issues](#common-issues) - - [Findings Not Being Pushed to Jira](#findings-not-being-pushed-to-jira) - - [Jira Issue Can't Be Created](#jira-issue-cant-be-created) -- [Retrieve Jira Server Logs for Troubleshooting](#retrieve-jira-server-logs-for-troubleshooting) - ## Common Issues ### Findings Not Being Pushed to Jira diff --git a/content/en/Integrations/defectdojo.md b/content/en/Integrations/defectdojo.md index bc9b82aed..d2931b303 100644 --- a/content/en/Integrations/defectdojo.md +++ b/content/en/Integrations/defectdojo.md @@ -10,14 +10,6 @@ description: > Configure the integration to import Cobalt findings into the DefectDojo platform. {{% /pageinfo %}} -In this article: -- [Integration Overview](#integration-overview) -- [What You Need](#what-you-need) -- [Step 1: Add a Tool Type](#step-1-add-a-tool-type) -- [Step 2: Add a Tool Configuration](#step-2-add-a-tool-configuration) -- [Step 3: Add an API Scan Configuration](#step-3-add-an-api-scan-configuration) -- [Step 4: Import Findings](#step-4-import-findings) - ## Integration Overview [DefectDojo](https://github.com/DefectDojo/django-DefectDojo) is a security orchestration and vulnerability management platform. It's a free open source tool that allows you to manage your application security program and streamline your DevSecOps workflows. diff --git a/content/en/Integrations/github.md b/content/en/Integrations/github.md index e4c1baff3..c88364636 100644 --- a/content/en/Integrations/github.md +++ b/content/en/Integrations/github.md @@ -10,14 +10,6 @@ description: > Learn how to set up an integration between Cobalt and GitHub (Cloud only). The availability of this feature depends on your [PtaaS tier](/platform-deep-dive/credits/ptaas-tiers/). {{% /pageinfo %}} -In this article: - -- [Integration Overview](#integration-overview) -- [Configure the Integration](#configure-the-integration) -- [Push Findings to GitHub](#push-findings-to-github) -- [Deactivate the Integration](#deactivate-the-integration) -- [Frequently Asked Questions](#frequently-asked-questions) - ## Integration Overview [GitHub](https://github.com/) is a code hosting platform for version control and collaboration. diff --git a/content/en/Integrations/kenna-security.md b/content/en/Integrations/kenna-security.md index 7f3c34813..75eae6ab2 100644 --- a/content/en/Integrations/kenna-security.md +++ b/content/en/Integrations/kenna-security.md @@ -12,14 +12,6 @@ Configure the integration to import Cobalt findings into the Kenna Security plat You can also refer to the Kenna Security [documentation](https://github.com/KennaSecurity/toolkit/tree/main/tasks/connectors/cobaltio#readme). {{% /pageinfo %}} -In this article: -- [Integration Overview](#integration-overview) -- [What You Need](#what-you-need) -- [Step 1: Create a Kenna Security Data Importer Connector](#step-1-create-a-kenna-security-data-importer-connector) -- [Step 2: Get the Kenna Security Toolkit Image](#step-2-get-the-kenna-security-toolkit-image) -- [Step 3: Run the Cobalt Task](#step-3-run-the-cobalt-task) -- [Step 4: View Imported Findings](#step-4-view-imported-findings) - ## Integration Overview [Kenna Security](https://www.cisco.com/c/en/us/products/security/kenna-is-part-of-cisco.html) is a risk and vulnerability intelligence platform. diff --git a/content/en/Integrations/webhooks.md b/content/en/Integrations/webhooks.md index 66ea6a758..b04e084b2 100644 --- a/content/en/Integrations/webhooks.md +++ b/content/en/Integrations/webhooks.md @@ -10,14 +10,6 @@ description: > Configure webhooks to subscribe to real-time updates for your pentests. {{% /pageinfo %}} -In this article: - -- [Introducing Webhooks](#introducing-webhooks) -- [Before You Start](#before-you-start) -- [Webhook Events](#webhook-events) -- [Configure Webhooks in the UI](#configure-webhooks-in-the-ui) -- [Troubleshoot Webhooks](#troubleshoot-webhooks) - ## Introducing Webhooks With our API-based webhooks, you can set up an integration between your app and the Cobalt platform to get notifications for pentest events. We’ll send you updates for each event to your URL through an HTTP POST request. diff --git a/content/en/Platform Deep Dive/Organization/Organization Settings/SAML SSO/_index.md b/content/en/Platform Deep Dive/Organization/Organization Settings/SAML SSO/_index.md index 2b53c2c0d..6c746f07a 100644 --- a/content/en/Platform Deep Dive/Organization/Organization Settings/SAML SSO/_index.md +++ b/content/en/Platform Deep Dive/Organization/Organization Settings/SAML SSO/_index.md @@ -11,14 +11,6 @@ description: > Cobalt supports **identity provider-initiated SAML single sign-on (SSO)**. As an Organization Owner, you can configure SAML SSO with your preferred identity provider. {{% /pageinfo %}} -In this article: - -- [SAML SSO Overview](#saml-sso-overview) -- [General Configuration Workflow](#general-configuration-workflow) -- [Enforce SAML SSO](#enforce-saml-sso) -- [Configuration Instructions for Specific Identity Providers](#configuration-instructions-for-specific-identity-providers) -- [Troubleshoot Your SAML SSO Configuration](#troubleshoot-your-saml-sso-configuration) - ## SAML SSO Overview {{% sso-definition %}} The Cobalt SSO service is based on the [Security Assertion Markup Language 2.0 (SAML 2.0)](/getting-started/glossary/#security-assertion-markup-language) specifications. Learn more about [SAML SSO](/getting-started/glossary/#saml-single-sign-on-sso). diff --git a/content/en/Professional Services/_index.md b/content/en/Professional Services/_index.md index 50567dc40..9bc95a20f 100644 --- a/content/en/Professional Services/_index.md +++ b/content/en/Professional Services/_index.md @@ -7,15 +7,10 @@ description: > --- {{% pageinfo %}} -Professional Services are an extension of our core [PtaaS platform](https://www.cobalt.io/ptaas) offering. Our security experts can run advanced pentest engagements for your organization, acting as an extension of your internal security team.

Need an Advanced Pentest? Contact Us » +Professional Services are an extension of our core [PtaaS platform](https://www.cobalt.io/ptaas) offering. Our security experts can run advanced pentest engagements for your organization, acting as an extension of your internal security team. {{% /pageinfo %}} -**In this article:** - -- [Pentest Engagements](#pentest-engagements) -- [Pentest Process](#pentest-process) -- [Asset Types](#asset-types) -- [How to Launch a Pentest](#how-to-launch-a-pentest) +Need an Advanced Pentest? Contact Us » ## Pentest Engagements