Skip to content

Copilot FAQ

Ostorlab Copilot is an AI-powered assistant that helps users navigate the platform by providing quick and context-aware answers to their questions. This FAQ covers common queries about Copilot's features, functionality, and usage.

What can I ask Copilot?

Ostorlab Copilot can assist with various tasks related to the platform. Here are some examples of what you can ask:

Documentation

  • Search for specific documentation topics → "How do I configure asset monitoring?"

Scans & Vulnerabilities

  • List your scans and their vulnerabilities → "Which vulnerabilities did my last scan find?"
  • Explain a vulnerability and how to fix it → "Explain this vulnerability and how to fix it."
  • Change the risk rating of a vulnerability → "Set the risk rating of vulnerability X to Low."
  • Start a web, mobile or network scan, and estimate how many tokens a scan would use → "How many tokens would a scan of my app use?"

Asset & Inventory Management

  • List, add, update or delete assets → "Show me all registered assets."
  • Review discovered assets, and confirm or reject them → "Which discovered assets are waiting for review?"
  • Manage asset owners, locations and tags → "Who owns asset X?"

Ticketing & Remediation

  • List tickets → "Show me all unresolved tickets."
  • Create a new ticket → "Generate a remediation ticket for vulnerability X."
  • Update existing tickets, including their status, priority and assignee → "Mark ticket vntc-12 as a false positive."
  • Manage ticket streams and checklists → "Add tickets vntc-3 and vntc-4 to the Mobile stream."

Configuration & Settings

  • Retrieve or update service level objectives (SLO) configurations → "What is my current SLO configuration?"
  • List, create, update or delete automation rules → "What automation rules are set up?"
  • List, create or update monitoring and schedule rules → "What monitoring rules are active?"
  • List, create or delete API keys → "What API keys do I have?"
  • Manage test credentials → "Which stored credentials do I have?"
  • List integrations, and configure Jira or Slack → "What integrations are set up?"

AI Agents

  • Create and manage AI agents, with their skills, MCP servers, memories and rules → "List my AI agents."

Metrics & Reporting

  • Fetch platform metrics → "Show me scan completion rates for the last week."
  • Export a table as a CSV, PDF or PPTX file → "Export my open P0 tickets as a CSV."
  • Retrieve user details → "Who is the admin of my organization?"
  • List available plans → "What subscription plans does Ostorlab offer?"
  • Check onboarding status → "What is my current onboarding progress?"

Security & Threat Intelligence

  • Get vulnerability details → "Tell me more about CVE-2023-1234."
  • Retrieve Threat Center information → "What are the latest threats in the Threat Center?"

Try asking specific questions to get the best results.

How does Copilot generate responses?

Copilot uses AI to analyze your query along with context from your current page. It pulls relevant information from the documentation and your organization's data, performs necessary queries, and provides a tailored response.

Can Copilot change things in my organization?

Yes. Copilot can create, update and delete items such as tickets, assets, rules and API keys when you ask it to. It acts with your permissions: it cannot do anything that your role does not allow.

Does Copilot remember my previous questions?

Yes. Copilot keeps your conversations, so you can go back to past answers from the conversation history. Within a conversation, Copilot uses your earlier questions as context.