Comprehensive directory of discovered URLs, APIs, JS scripts, admin consoles, and forms.
Attack Surface Map is the inventory of what a scan was able to discover: URLs, APIs, JavaScript files, forms, and paths that look like admin pages. It answers where the scanner went before you read individual vulnerabilities.
Search or filter by type when the crawl is large. A path listed here was observed during discovery. It is not automatically a vulnerability. Use it to decide which host or endpoint still needs a Security or API scan.
If an important page is missing, the crawler may not have reached it because of login, a robots rule, a sitemap gap, or a link that was never exposed. Add coverage with another scan profile rather than assuming the page is safe.