---
title: "How to get started with Cobalt"
description: "Visualize your journey with Cobalt, and launch your first pentest to make your security stronger."
canonical_url: "https://cobalt-io.brainfish.ai/articles/how-to-get-started-with-cobalt-Di38tyRXvB"
md_url: "https://cobalt-io.brainfish.ai/articles/how-to-get-started-with-cobalt-Di38tyRXvB.md"
---
# How to get started with Cobalt

:::info
Visualize your journey with Cobalt, and launch your first pentest to make your security stronger.

:::

Optimize your Cobalt experience and maximize your security impact by completing these key steps:

 ![](https://cobalt-io.brainfish.ai/api/attachments.redirect?id=390902b8-b4b2-428f-b155-e824693f127f)

## 1. Discover Your Attack Surface

Find all of your externally reachable targets by scanning your domains. Our [Attack Surface](https://cobalt-io.brainfish.ai/en-us/articles/attack-surface-hbYjuOCkGO) feature automatically maps your internet-facing assets, so you can easily see what’s exposed and identify potential vulnerabilities.

## 2. Automate Vulnerability Scanning

Start scanning for vulnerabilities in your web applications and APIs with our [Dynamic Application Security Testing (DAST) scanner](https://cobalt-io.brainfish.ai/en-us/articles/dast-scanner-gqJRIkxjiq). Every customer gets one target for FREE with unlimited scanning.

## 3. Define Your Assets

Clearly [define your assets](https://cobalt-io.brainfish.ai/en-us/articles/create-an-asset-9P1WPENeIC) to ensure your pentests are comprehensive and efficient. Your [assets](https://cobalt-io.brainfish.ai/en-us/articles/asset-types-OQp8vLaQ85) are the web applications, APIs, or other systems you want to have tested.

## 4. Start a Pentest

Schedule and launch a [pentest](https://cobalt-io.brainfish.ai/en-us/articles/pentests-t8vsKFfrV6) directly from the Cobalt platform. Choose your desired start date and testing methodology to begin protecting your assets.

## 5. Integrate Your Tools

Connect Cobalt with the tools you already use, like Jira or GitHub, using our [Integration Builder](https://cobalt-io.brainfish.ai/en-us/articles/integration-builder-Aelp0wU7EI). This no-code platform lets you automate security workflows and share data seamlessly.

## 6. Plan Your Security Program

Centrally visualize and manage your annual testing program. Use our [Planning](https://cobalt-io.brainfish.ai/en-us/articles/planning-YUnVRrys1d) feature to plan, track, and execute all of your tests in one place.

## Get in Touch

### If you need help, don’t hesitate to contact us.

* **For general support**: Reach out to your Customer Success Manager (CSM). You can find their name and contact information on your platform’s homepage or on any pentest brief.
* **For all other inquiries**: Send an email to [support@cobalt.io](mailto:support@cobalt.io). We process all support requests within one business day.

If you find a security issue on the Cobalt platform, report it to [security@cobalt.io](mailto:security@cobalt.io). Learn more about our [security practices](https://cobalt.io/security/practices).