---
title: "Discover Assets"
url: "https://docs.indusface.com/en/article/discover-assets"
language: "en"
last_updated: "2026-03-24T11:29:12.864Z"
---

# Discover Assets

The Discover Assets feature helps you find and manage your public-facing assets including web applications and APIs. It gives you full visibility into these assets and displays details such as public IP addresses, subdomains, and hosting data centers. This helps you maintain an accurate and up-to-date inventory for stronger security.

### How to Access Discovered Assets

To view newly discovered assets:

1.  Select the **All Domains** filter.
2.  Go to **Applications & Groups > Discover & Manage**.

> **Note**: If you select an individual domain in the filter, the tab name changes to **Manage Assets**. The tabs under this section differ from those under **Discover and Manage**.

### Discovered Root & Sub Domains

 The discovery results show:

1.  The date of the last scan
2.  Total number of root and subdomains
3.  Subdomain count for each root domain
4.  Number of included TLDs (Top-Level Domains)

![](https://cdn-assets.productfruits.com/e6808c36-8464-4602-87e1-077d04ac1eb8)

### Configure Domain Discovery Settings by TLDs

Fine-tune domain discovery settings by managing TLDs.

1.  Go to **Discover Summary > Configure Domain Discovery**.
2.  Review the list of TLDs with checkboxes. All are selected by default.
3.  To exclude a TLD, uncheck the box next to it.
4.  To include a specific TLD, use the search bar and check the box.
5.  Click **Save** to apply your changes.

![](https://cdn-assets.productfruits.com/f3b7a609-8abd-4c10-803f-19369c74d72c)

#### Discover Applications

To initiate a discovery scan:

1.  In the **Discover Summary**, click **Discover Applications**.
2.  A confirmation pop-up appears showing the number of root domains that will be scanned.
3.  Choose to include or exclude specific root domains.
4.  Click **Start** to begin the scan.

> **Note**: Discovery may take up to 72 hours to complete and identify all related subdomains 

![](https://cdn-assets.productfruits.com/fdfe868b-61d7-4afc-9e01-6c6cecf2018d)

#### List of Subdomains 

After the scan completes, you will see a list of discovered subdomains for each root domain, along with the following details:

| **Parameter** | **Description** |
| --- | --- |
| Subdomain | Name of the subdomain. |
| IP Address | Subdomain's public IP. |
| Data Center | Hosting location. |
| Discovered On | Date discovered. |
| Type | Type of Subdomain discovered (e.g., Website, API) |
| Enable Protection | One Click Onboarding of unprotected Subdomains to AppTrana. |
| Action | Click **Ignore** to move subdomain Ignored Tab. |

![](https://cdn-assets.productfruits.com/e05d7921-d45d-462e-bd56-b88279cf1bd8)

#### AI Server Exposure

AppTrana surfaces exposed AI runtime services, such as Ollama, and highlights them within the discovered subdomain inventory when they are publicly accessible due to misconfiguration or missing access controls.

These assets are automatically tagged (e.g., *Ollama*) to help you quickly filter and isolate AI-related exposures across your environment.

![](https://cdn-assets.productfruits.com/7e27a49e-c59f-4ad7-b360-697ac6e798c8)

**AI Server Detail View (IP-Level)**

Clicking on the IP address opens a detailed view of the identified AI server.

![](https://cdn-assets.productfruits.com/14e46922-2828-4ffe-8a7c-4cfb83126bd5)

![](https://cdn-assets.productfruits.com/5436b3b3-545f-4b44-9b25-03c4a7d6c922)

This view provides:

-   Open port details (e.g., 443)
-   Detected web server information
-   List of hosted AI models (e.g., DeepSeek, GPT variants)

This allows security teams to validate exposure, understand the runtime environment, and take immediate action.

**Filtering AI Exposures**

Use the Filter option to view only assets tagged as AI services (e.g., Ollama). 

![](https://cdn-assets.productfruits.com/1f5accd1-06b1-4641-89b6-1a89f2ab40c7)

![](https://cdn-assets.productfruits.com/9f36104f-6a49-47dc-a128-6217189e15cc)

This helps you quickly identify shadow AI deployments, prioritize remediation of high-risk assets and reduce noise from non-AI infrastructure.

![](https://cdn-assets.productfruits.com/54d64362-0522-46ab-8e9a-86d47cb77d96)

#### Exporting Asset Inventory Data

You can download the complete asset inventory for offline analysis, reporting, and remediation tracking.

![](https://cdn-assets.productfruits.com/94dd1cc8-3383-4301-a89a-b83674a4fc28)

![](https://cdn-assets.productfruits.com/14c76c4e-eee8-4399-bec3-3d83073ed8ad)

| **Parameter** | **Description** | **Applicable To** |
| --- | --- | --- |
| Subdomain | Name of the discovered subdomain | All assets |
| IP Address | Public IP address mapped to the subdomain | All assets |
| Data Center | Hosting provider or infrastructure location (e.g., AWS, On-Premises) | All assets |
| Discovered Date | Date when the asset was identified during the scan | All assets |
| Type | Asset type (e.g., Website, API) | All assets |
| AI Detection | Indicates if an AI runtime (e.g., Ollama) is detected (Yes/No) | All assets |
| Port | Open port used by the detected AI service (e.g., 80, 443) | AI-detected assets only |
| Web Server | Detected server details for the AI runtime (e.g., Apache version) | AI-detected assets only |
| Models Detected | List of AI models exposed via the service | AI-detected assets only |

#### Configure Root Domains

Manage whether a root domain is included in future scans.

1.  Navigate to the **Root Domains** section.
2.  Use the search bar to locate the domain.
3.  Use the toggle switch to **Include** or **Exclude** the domain.

  ![](https://cdn-assets.productfruits.com/f8955e1e-706d-4792-86bb-5b9432afe2db)

4\. To ignore a domain completely, click **Configure > Ignore**.

![](https://cdn-assets.productfruits.com/16369548-c47b-423d-aa22-be8ab41d6245)

### Excluded Root & Sub Domains 

#### Excluded Root Domains 

| Parameter | **Description** |
| --- | --- |
| Root Domain | Name of the excluded root domain. |
| IP Address | IP address of the domain. |
| Data Center | Hosting location. |
| Discovered On | Date of discovery. |
| Action | Click **Restore** to re-include in protection. |

### Restore Root Domain

To restore:

1.  Locate the domain in the table.
2.  Click **Restore** in the Actions column.
3.  Confirm restoration in the pop-up  
     

![](https://cdn-assets.productfruits.com/9c11cc3f-1bda-479e-9c0c-a39a1a4dd2b3)

### Excluded Subdomains

View ignored subdomains that can be restored.

| **Parameter** | **Description** |
| --- | --- |
| Subdomain | Name of the subdomain. |
| IP Address | Subdomain's public IP. |
| Data Center | Hosting location. |
| Discovered On | Date discovered. |
| Action | Click **Restore** to move subdomain back into protection. |

### Protected Subdomains

Lists onboarded subdomains and their security metrics.

| **Parameter** | **Description** |
| --- | --- |
| Asset Name | Protected subdomain name. |
| Last Scan | Date of the most recent scan. |
| Open Vulnerabilities | Number of unresolved issues by severity. |
| Bandwidth Usage | Data used by the application. |
| Total Attacks | Number of detected attacks. |
| WAF Status | Current Web Application Firewall mode. |
| API Policy Creation | Displays the number of API sites protected using Positive Security Rules. This metric is shown only when the site type is set to API or Hybrid. |
| Plan | Subscription plan assigned (e.g., Premium, Advanced). |
| Actions | Includes options like **Unprotect** or **Download Report**. |

You can group subdomains for better management and view metrics per group.  
  
![](https://cdn-assets.productfruits.com/20ed5104-fed4-438e-8935-dae57be187c4)  
 

### Add a New Application

To onboard a new subdomain:

-   Click **Add Application** from the application list view.

### Edit Group

-   Selecting a group updates the dashboard to show group-specific data.
-   Click **Edit Group** (available only for custom groups) to modify the group.

### Create a Group

Creating a custom application group helps you organize related subdomains or applications under a single dashboard view. This allows security teams to monitor metrics, manage vulnerabilities, and apply security policies more efficiently across specific business units, regions, or application types.

To create a custom application group: 

#### Step 1: Enter Basic Details

1.  Go to **Groups > Create Group**.
2.  Enter the **Group Name** and **Description**.
3.  Click **Next**.

![](https://cdn-assets.productfruits.com/10f8180c-7847-43ac-9778-a57468fe947f)

#### Step 2: Select Applications

1.  Use the checkboxes to select subdomains.
2.  Use the search bar to filter.
3.  Click **Save**.

The new group appears alongside **All Sites**

![](https://cdn-assets.productfruits.com/4ee32f23-6015-4b39-a352-68125c87bf29)