What does “Confirm attack surface inventory” mean?

The Confirm attack surface inventory step is primarily a review-and-confirmation workflow for assets that Oneleet has already discovered.

What you should do in this step

Use this screen to review the assets Oneleet detected and decide which ones should remain in scope for monitoring.

• Confirm discovered assets that belong to your organization and should be monitored.

• Exclude assets that do not belong to your organization or should not be monitored.

• Review ownership details where prompted so Oneleet can correctly track the asset.

Do I need to manually add missing assets here?

No. This screen is not intended to be a manual asset-creation workflow where you add every asset that might be missing.

If you believe Oneleet is missing part of your attack surface, expand coverage by adding or verifying the relevant domains or scan targets. Oneleet can then discover related assets through attack surface monitoring.

Summary

In short: confirm what Oneleet discovered, exclude anything that should not be monitored, and add or verify scan targets elsewhere if you need broader discovery coverage.