Getting Started with CyberOptix

Welcome to CyberOptix.

This guide is designed to help you successfully onboard to the platform and begin realizing value as quickly as possible. It covers the essential steps for verifying ownership of your environment, initiating discovery, reviewing initial exposure data, and taking your first remediation action.

By the end of this guide, you will:

Verify ownership of your organization's domain(s)
Begin automated asset and exposure discovery
Review your initial attack surface and identity exposure data
Investigate and prioritize your first finding
Understand the recommended next steps for ongoing exposure management

The first thing you will see after logging in is the Welcome Guide. Each onboarding step is clickable and takes you directly to the appropriate page within CyberOptix.

This guide explains what each step does, why it matters, and what success looks like before moving on to the next step.

Note: CyberOptix is frequently delivered through managed security service providers (MSSPs) as a white-labeled platform. As a result, your portal may display your provider's name, logo, and branding instead of CyberOptix.

Regardless of branding, the platform functionality, navigation, and workflows described in this documentation remain the same. References to "CyberOptix" throughout this guide refer to the platform itself, even if your portal is branded differently.

Before You Begin

Before starting, ensure you have:

Administrative access to CyberOptix
Access to manage your organization's DNS records
The primary domain(s) you want CyberOptix to monitor
Access to any cloud, source control, or security platforms you plan to integrate

Step 1: Verify Your Domain

Select Verify Your Domain from the Welcome Guide.

Domain verification authorizes CyberOptix to begin discovery across your organization's external attack surface.

Copy the verification code provided and create the requested TXT record within your DNS provider. Once verification completes, CyberOptix automatically begins discovery.

Success Criteria

Domain status shows as verified
Discovery has started
Assets begin appearing within the platform

Step 2: Review Your Attack Surface

Select Review Your Attack Surface from the Welcome Guide.

CyberOptix continuously discovers assets associated with your organization, including hosts, services, web applications, certificates, and other internet-facing resources.

Review the discovered assets and identify any systems that are unexpected, unknown, or no longer in use.

Success Criteria

Assets have been discovered
You understand what is externally exposed
Unexpected assets have been identified for review

Step 3: Review Identity Exposure

Select Review Identity Exposure from the Welcome Guide.

CyberOptix identifies breach records, exposed credentials, and identity-related risks associated with your organization.

Pay particular attention to privileged accounts, recently exposed credentials, and any accounts that may require password resets or MFA validation.

Success Criteria

Identity exposure data has been reviewed
Potentially compromised accounts have been identified
Immediate remediation actions are understood

Step 4: Review Findings

Select Review Findings from the Welcome Guide.

CyberOptix consolidates exposures from across the platform into a single prioritized findings queue. Findings represent security issues that require investigation or remediation.

Review the highest-priority findings and familiarize yourself with the information available for each exposure.

Success Criteria

Findings are visible
High-priority exposures have been reviewed
Remediation priorities are understood

Step 5: Take Your First Action

Select a finding and begin remediation.

Assign an owner, document any actions taken, and track progress through resolution.

Completing this step validates that CyberOptix is successfully collecting data and that your exposure management workflow is operational.

Success Criteria

A finding has been reviewed
Ownership has been assigned
Remediation activity has begun

Where to Go Next

Once the four steps are done and you have triaged your first finding:

Connect integrations (Integrations → Available Integrations) so cloud, code, and endpoint data flow in automatically
Set up scanning (Validation Operations → Scanners) to continuously test what discovery finds
Define Remediation SLAs (Governance → Remediation SLA) so fix timelines are enforced, not aspirational
Configure notifications (Administration → Notifications) so new critical exposures reach you without logging in

Full documentation for every feature is available at docs.cyberoptix.io.