Managing Assets
An asset is a specific target within a project — the system or application you want to test. Each asset can have multiple test jobs run against it over time.
Asset Types
PAIStrike supports the following asset types:
| Type | Description | Target Format |
|---|---|---|
| Web | Web applications accessible via HTTP/HTTPS | URL (e.g., https://app.example.com) |
| API | REST, GraphQL, or other web APIs | Base URL or OpenAPI spec URL |
| Mobile | iOS or Android applications | App identifier or upload |
| Network | Hosts, IP ranges, or subnets | IP address or CIDR range |
| Cloud | Cloud service endpoints or infrastructure | Cloud resource URL or identifier |
| Other | Anything not covered by the above categories | Custom description |
Adding an Asset
- Open a project.
- Click Add Asset.
- Fill in the asset details:
Asset Name
A human-readable name to identify this asset.
- Example:
Production Web App,Internal API v2,Dev Server - Required; must be 2–128 characters
Asset Type
Select the type that best matches your target (see table above).
Target (URL / IP Address)
The actual address or identifier for the asset.
- For Web/API: a full URL including scheme (e.g.,
https://api.example.com) - For Network: an IP address or CIDR range (e.g.,
192.168.1.0/24) - For Mobile: the app bundle identifier or store URL
Description
Optional notes about the asset. Use this to capture:
- Technology stack
- Authentication requirements
- Scope notes or exclusions
- Contact information for the asset owner
Status
Set the asset's current status:
| Status | Meaning |
|---|---|
| Active | Asset is in scope and can be tested |
| Inactive | Asset exists but is currently out of scope |
| Archived | Preserved for historical reference |
- Click Save Asset.
Editing an Asset
- Open the project and find the asset in the list.
- Click the asset name to open the asset detail page.
- Click Edit Asset.
- Update the relevant fields.
- Click Save.
Viewing Asset History
The asset detail page shows a history of all jobs run against it, including:
- Job start and end times
- Testing mode (black box / white box)
- Number of findings discovered
- Final job status
This history helps track how the security posture of an asset changes over time as issues are remediated and retested.
Deleting an Asset
Warning: Deleting an asset removes all associated jobs and findings permanently.
- Open the asset.
- Click Delete Asset in the asset settings or danger zone.
- Confirm the deletion.
Only Admins and Maintainers can delete assets.