Adding Assets

Assets are the domains, subdomains, IPs, and APIs that Detectify monitors and scans on your behalf. This guide explains the different ways to add assets and how they are organized.

Understanding Assets

Detectify works with several types of assets:

• Domains — Root domains such as example.com
• Subdomains — Hostnames under a root domain, such as app.example.com or api.staging.example.com
• IP addresses — Individual IPs associated with your infrastructure
• APIs — API endpoints discovered on or associated with your domains

Root assets are the top-level entries that define your scanning scope. Root assets are always either root domains or IP addresses. All imported domains serve as seeds for Detectify’s discovery engine, which automatically finds additional subdomains, related root domains, and IP addresses within your attack surface.

When you add a subdomain without its root domain, the highest-level subdomain in the hierarchy becomes the root asset. For example, if you add app.staging.example.com without first adding example.com, then staging.example.com is treated as the root asset.

Methods for Adding Assets

Connectors (Recommended)

Connectors automatically sync assets from your cloud DNS providers, keeping your asset inventory up to date without manual effort. This is the recommended approach for most organizations.

See Connectors for setup instructions.

Zone Files and DNS Zone Transfers

If you manage DNS zone files, you can bulk import domains by uploading a zone file:

1. Go to Assets > Add Assets.
2. Select Zone File Upload.
3. Upload your zone file or paste the contents directly.

Detectify parses the zone file and imports all discovered domains. This method is useful for importing large numbers of domains at once.

Manual Domain Addition

You can add domains individually through the UI or the API.

Through the UI:

1. Navigate to Assets > Add Assets.
2. Select Add Domain.
3. Enter the domain name and click Add.

Through the API:

curl -X POST https://api.detectify.com/rest/v2/assets/ \
  -H "X-Detectify-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name": "example.com"}'

Manual IP Addition

You can add individual IP addresses as root assets for Application Scanning.

To add an IP address:

1. Navigate to Assets > Add Assets.
2. Select Add IP Address.
3. Enter the IP and click Add.

Removing Assets

When you remove an asset from Detectify, all associated data is permanently deleted. This includes discovered subdomains, scan history, and all vulnerability findings linked to that asset. This action cannot be undone.

To remove an asset, go to Assets, select the asset, and click Remove Asset.

Next Steps

After adding your assets, you need to verify ownership before scanning can begin.