Skip to main content
A Target is a place you want looked at, and the unit findings group under.

​
Create a Target

The Console calls this object a Target on the Targets tab and a scan surface in the New Scan modal. The command line calls it a deployment, so every command that acts on a Target uses the deployment-* name. All three are the same object.
1

Open the New Scan Modal

Open Discover in the sidebar and press + New Scan. If the modal shows tabs, stay on Scan surfaces.
2

Add a Scan Surface

Press + Add new scan surface below the list of existing Targets.
3

Name It

Enter a Scan surface name, for example prod-eks-us-west-2, and press Create scan surface. Back returns you to the list without creating anything.
4

Copy the Credentials

The modal changes to Scan surface created and shows two values, each with a copy button:
The Console shows the enrollment code in full once. Copy it before you press Done, because it cannot be retrieved later. If minting fails, press Retry mint.
Press Done. The new Target appears on the Targets tab.
The enrollment code the Console mints allows any scanner kind and expires after 24 hours. For a narrower code, such as one limited to endpoint_macos, generate it on the Scanners sub-tab instead, and revoke the one the Console minted.The Console creates scanner Targets only. To create a dlp Target fed by Dome telemetry, use the command line.

​
The Targets Tab

Open Discover in the sidebar and choose the Targets tab. Filter chips across the top count Targets by kind: All, Endpoint, Browser, Network, Cloud, and Source code. A Kubernetes cluster counts under Network, because the in-cluster Collector and the network scanner report as the same scanner kind. A chevron at the start of each row expands it to show that Target’s findings, grouped into AI, Non-AI, and Uncertain.
The Agents column counts Collectors. A Target showing three agents has three scanners installed against it. This column is separate from the Agent Registry.

​
Inside a Target

Click a Target to open it. The identifier sits under the title with a copy button, and the top right shows connection state and a Scan now button. Two counters sit across the top: After the first scan, a line beneath the counters summarizes the most recent scan: when it ran, which Collector kind reported it, and how many Collectors it covered. Below that sit two panels, Usage insights and Agent activity. Both fill only from Vijil Dome telemetry pointed at this Target, and both stay empty on a Target that only runs scans.
The word “Agent” carries two meanings on this screen. In the Agent activity panel it means an AI Agent. In the Agents column and the connection badge it means a Collector.
Below them, five sub-tabs: The header badge reads Agent online, Agent stale, No agent reporting, or No agent connected.

​
Run a Scan

Press Scan now on the Target, or:
You can also press + New Scan on Discover. If the modal shows tabs, stay on Scan surfaces. The modal calls Targets “scan surfaces”. Pick one and press Scan. When there are more than five, a filter box above the list matches by name or identifier. If the Target you want is not in the list, press + Add new scan surface below it to create one without leaving the modal. Collectors poll every 30 seconds by default, so expect a short delay before the scan starts. Scan now reaches only Collectors that checked in within the last 24 hours. If none have, the Console tells you that it queued nothing. If the Target has no Collector connected, the Console asks you to confirm first.

​
Schedule Recurring Scans

Open the Schedule sub-tab, or use the command line:
--body takes a JSON object inline, or @file to read one from a file. Schedule a recurring scan for any Target you intend to keep.

​
Delete a Target

1

Find the Target

Open Discover and choose the Targets tab.
2

Press the Trash Icon

In the Actions column of the Target’s row, press the trash icon labeled Delete scan surface.
3

Confirm

The Delete scan surface? dialog names the Target and lists what goes with it. Press Delete to confirm, or Cancel to keep it.
The Console confirms with Scan surface deleted, and the row disappears from the list.
Deleting a Target cannot be undone. It removes the Target’s Collectors, enrollment codes, policies, and scan history.
You can skip revoking the credentials first. Any Collector still installed on a machine loses its ability to report, so uninstall those separately.

​
Next Steps

Install a Collector

Credentials and install steps for each kind.

Review Discovered Resources

Read what a scan returned.
Last modified on October 7, 2026