More Useful Guardrails: Introducing Sybil’s Automated Scope Recommendations

Key Takeaways:

• Evidence-Backed Guardrails: Scope recommendations compare what is actually reachable against what you’ve configured, flagging gaps based on traffic Sybil observed.
• Confidence Built In: Recommendations show exactly how they were discovered, whether before or after sign-in, so you can assess a suggestion's trust level in seconds.
• You’re Always In Control: Review, accept, edit, or dismiss suggestions one at a time or in bulk.

RunSybil is launching automated scope recommendations that map customers’ attack surfaces and flag gaps in their scope before testing even starts.

The feature is designed to give customers confidence that their scope covers real risk and misses nothing. It also ensures they’re not wasting time on noise, or leaving doors open to assets they never meant to include.

With scope recommendations, customers get a clear picture of what needs testing, while keeping full control over what is tested. And there’s no waiting on manual scoping calls and reviews other vendors require. 

When Sybil runs an automated evaluation, the customer’s scope sets the rules of engagement. It defines the exact boundaries of the test, telling Sybil which applications and targets it is authorized to evaluate. Every test stays inside the configured scope, so anything that is not authorized is not evaluated. Targets are defined using three clear levels: 

1. Attackable for full testing
2. Accessible for navigation without attack traffic
3. Off limits for domains that should never be touched

How It Works

Sybil continuously maps what is actually reachable and compares it to the scope you initially configured. When Sybil spots a gap, it surfaces a recommendation in your application settings with the supporting evidence. Sybil only shows suggestions that meet our confidence bar. And you can manage recommendations by accepting, editing, or dismissing them individually or in bulk. You make the call.

With applications evolving faster and changing more rapidly, getting scope right is much more difficult. We built this expertise directly into Sybil to provide users with recommendations from day one, while also continuously learning and improving over time.
Proof It Works

A large fintech company asked for help with their scope and received early access to scope recommendations. Sybil found four domains their application depends on that their original scope left out. One of these domains actually hosts their application's front-end code. The organization used three of Sybil’s four suggestions, so the evaluation started with a fuller picture of the application than their original scope would have allowed.

What's Coming

We're building proactive notifications so you'll know the moment new recommendations are ready. No manual check-ins required. We're also continuing to refine the review experience and recommendation engine based on customer feedback.

‍