--- description: "See the functions of the Fluid Attacks platform’s sections as well as of its header items." keywords: "Fluid Attacks platform sections, information, vulnerabilities, organization sections, group sections, Fluid Attacks platform, Fluid Attacks documentation" other: private: false title: Platform sections and header items --- # Platform sections and header items import { Image } from "@/components/image"; Here is an overview of all the sections of the Fluid Attacks platform. For ease of presentation, they are divided into two main groups: [organization-level sections](https://help.fluidattacks.com/portal/en/kb/articles/platform-sections-and-header-items#Organization-level_sections) and [group-level sections](https://help.fluidattacks.com/portal/en/kb/articles/platform-sections-and-header-items#Group-level_sections). ## Organization-level sections Once you log in to the platform, you are at this level, which collects and presents information related to all the groups or projects your company has with Fluid Attacks. You can change between the sections at this level from everywhere in the platform by using the collapsible menu. Here is how the menu looks like to [Organization Managers](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles#Organization_Manager_role) (access to sections and functions in the platform is managed through [roles](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles)):

Use the collapsible menu on the Fluid Attacks platform

### Groups Your company may have several applications or software products and want to keep track of their security assessments and risk exposure separately. This is why you can [create](https://help.fluidattacks.com/portal/en/kb/articles/create-and-delete-groups) a [group](https://help.fluidattacks.com/portal/en/kb/articles/platform-faq#What_is_a_group) in the platform for each of them. In the [Groups section](https://help.fluidattacks.com/portal/en/kb/articles/know-your-groups-section), you find the list of your groups and several bits of information about each of them, as well as the total amounts of covered and missed contributing [authors](https://help.fluidattacks.com/portal/en/kb/articles/platform-faq#Members) and repositories across the organization's groups. ### Analytics In the [Analytics section at the organization level](https://help.fluidattacks.com/portal/en/kb/articles/organization-analytics), you can view various charts, tables and figures with valuable information on security testing results, vulnerability management strategies, and progress in reducing risk exposure in your organization (i.e., including data from all its groups), among other things. Here are some examples of the information available: - [Exposure management over time](https://help.fluidattacks.com/portal/en/kb/articles/common-analytics#Exposure_management_over_time) - [Exposure benchmark](https://help.fluidattacks.com/portal/en/kb/articles/common-analytics#Exposure_benchmark) - [Remediation rate benchmark](https://help.fluidattacks.com/portal/en/kb/articles/organization-analytics#Remediation_rate_benchmark) - [Accepted vulnerabilities by CVSS severity](https://help.fluidattacks.com/portal/en/kb/articles/common-analytics#Accepted_vulnerabilities_by_CVSS_severity) - [Vulnerabilities treatment](https://help.fluidattacks.com/portal/en/kb/articles/common-analytics#Vulnerabilities_treatment) - [Reporting technique](https://help.fluidattacks.com/portal/en/kb/articles/common-analytics#Reporting_technique) ### Portfolios Portfolios are sets of groups that you can create to establish and observe [comparisons](https://help.fluidattacks.com/portal/en/kb/articles/portfolio-analytics) of some of the data displayed in their respective Analytics sections. In the [Portfolios section](https://help.fluidattacks.com/portal/en/kb/articles/sort-groups-into-portfolios), you will find the list of portfolios created by your organization. ### Members > [!NOTE] > > [**Role**](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles) **required:** Vulnerability Manager or Organization Manager. The [Members section at the organization level](https://help.fluidattacks.com/portal/en/kb/articles/manage-members#Organization-level_members) is where you can view or manage the members of the organization. These are platform users who, according to their role, may have permission to visualize organization-level sections or access the organization's groups and perform more management functions. ### Policies Fluid Attacks allows you to view or establish policies around accepting security vulnerabilities, preventing deployment into production when vulnerabilities are present, and prioritizing vulnerabilities for remediation. Those defined in the [Policies section](https://help.fluidattacks.com/portal/en/kb/articles/manage-general-policies#Manage_your_organization_s_general_policies) are inherited by all the groups in your organization, although [group-specific policies](https://help.fluidattacks.com/portal/en/kb/articles/manage-general-policies#Manage_your_general_policies_at_a_group_level) may be established in the Scope section. ### Authors > [!NOTE] > > [Role](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles) required: Organization Manager Since contributing developers may create commits using different email addresses, it is useful to consolidate contributor information. The [Authors section](https://help.fluidattacks.com/portal/en/kb/articles/manage-organization-mailmap) allows you to view single contributors and all their associated user names and email addresses. ### Billing > [!NOTE] > > [**Role**](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles) **required:** Organization Manager In the [Billing section](https://help.fluidattacks.com/portal/en/kb/articles/billing-advanced-plan#Billing_report_generation), you find the number of monthly active authors in each group (which helps calculate the cost of [Continuous Hacking](https://fluidattacks.com/services/continuous-hacking/)) and the saved payment methods. ### Out of Scope Fluid Attacks recommends you use Open Authorization (OAuth) to [import the repositories to be tested](https://help.fluidattacks.com/portal/en/kb/articles/import-repositories-fast-and-safely-with-oauth). This entails connecting Fluid Attacks' platform to your account on a code repository hosting provider (such as GitLab) to retrieve the repositories there without sharing credentials with Fluid Attacks. The [Out of Scope section](https://help.fluidattacks.com/portal/en/kb/articles/see-retrieved-repositories-not-yet-added-to-any-group) shows the repositories that were not selected to be imported in the mentioned process and included in one of the groups. Therefore, those repositories are not yet within the scope of Fluid Attacks' security testing. In this section, you may add them to groups. ### Credentials In the [Credentials section](https://help.fluidattacks.com/portal/en/kb/articles/manage-your-credentials), if you have a [Organization Manager role](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles#Organization_Manager_role), you can authorize Fluid Attacks to retrieve your repositories on Azure, Bitbucket, GitHub or GitLab through OAuth. Such authorization is saved in the platform as credentials that can in future be associated to more assets they give access to so that they can be tested. However, actual credentials, such as username and password pairs, can also be added on this section. Fluid Attacks uses OAuth and credentials safely to have access to the [target of evaluation (ToE)](https://help.fluidattacks.com/portal/en/kb/articles/glossary#Target_of_Evaluation_ToE). ### Compliance The [Compliance section](https://help.fluidattacks.com/portal/en/kb/articles/check-your-compliance-with-standards) shows details of your organization's [compliance with several international standards](https://db.fluidattacks.com/std/) which are the basis for the security requirements that Fluid Attacks tests in your systems. Among the useful information provided here are how well your organization is doing with particular standards in comparison to other organizations and how many days it will take your organization to achieve compliance with all standards. ### Logs > [!NOTE] > > [**Role**](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles) **required:** User The [Logs section](https://help.fluidattacks.com/portal/en/kb/articles/view-and-download-logs) shows the HTTP, network, and session logs related to access to your organization's assets when it has enabled zero trust network access (ZTNA). ### Integrations Fluid Attacks' platform can connect with [IDE plugins and bug-tracking systems](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks) used by your team. In the Integrations section, you can find links to Fluid Attacks' documentation about the possible integrations (e.g., [IntelliJ IDEA](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks/use-ide-extensions/intellij-plugin) and [VS Code](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks/use-ide-extensions/vs-code-extension) plugins) and manage some of them (i.e., [Azure DevOps](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks/use-the-azure-devops-integration), [GitLab](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks/use-the-gitlab-integration), and [Jira Cloud](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks/use-the-jira-integration)). Moreover, this section also has links to documentation on [using the API](https://help.fluidattacks.com/portal/en/kb/integrate-with-fluid-attacks/use-the-api) and [creating webhooks](https://help.fluidattacks.com/portal/en/kb/articles/get-notified-with-webhooks). ### Help Fluid Attacks has options that you can use when you need [help regarding its AppSec solution](https://help.fluidattacks.com/portal/en/kb/find-security-vulnerabilities/use-the-platform/use-help-options), Continuous Hacking, or guidance in understanding vulnerabilities or using our platform. To access these options on the platform, click on Help, located at the bottom of the [collapsible menu](https://help.fluidattacks.com/portal/en/kb/articles/platform-sections-and-header-items#Organization-level_sections). This makes a bar appear on the right side of the screen. Use help options on the Fluid Attacks platform

Use help options on the Fluid Attacks platform

These are the help options offered by Fluid Attacks within the menu: 1. **[Talk to a Pentester](https://help.fluidattacks.com/portal/en/kb/articles/talk-to-a-pentester):** Use this Advanced-plan-exclusive feature to have a videoconference with one of Fluid Attacks' pentesters about complex reported vulnerabilities. (You can view and use this option only while you are inside a group that is subscribed to the Advanced plan.) 1. **[Live chat](https://help.fluidattacks.com/portal/en/kb/articles/ask-via-chat):** Use this option to send Fluid Attacks questions about any feature of the platform and its use that you have not found the answer to in the Help Center. 1. **[Learn how to use](https://help.fluidattacks.com/portal/en/kb/articles/watch-tutorial-videos-or-get-a-demo):** Click on this option to find a link to the [Fluid Attacks' certification](https://training.fluidattacks.tech/collections) tailored to your role that you can achieve in about one hour ([see topics in Tutorial videos](https://help.fluidattacks.com/portal/en/kb/articles/tutorial-videos)) or to [schedule a live demo](https://help.fluidattacks.com/portal/en/kb/articles/watch-tutorial-videos-or-get-a-demo#Live_Demo). 1. **[Help Center](https://help.fluidattacks.com/portal/en/kb/):** This should be your go-to option for any doubt you have. If Fluid Attacks' documentation does not help you, you can consider the other help options. 1. **[Contact support](https://help.fluidattacks.com/portal/en/kb/articles/send-fluid-attacks-an-email):** You can click on this option to send an email to Fluid Attacks. ## Group-level sections Click on the name of a group in the Groups section to enter its dedicated space. You can change between sections using the tabs under the group's name. Here is what the group-level sections menu looks like to [Group Managers](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles#Group_Manager_role) (access to group sections and functions in the platform is managed through [roles](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles)). Navigate the sections of a group on the Fluid Attacks platform

Navigate the sections of a group on the Fluid Attacks platform

### Vulnerabilities (by weakness) The [Vulnerabilities section](https://help.fluidattacks.com/portal/en/kb/articles/see-where-vulnerabilities-are-and-more-details) on the platform is where you can access detailed information on all the confirmed security vulnerabilities found in your own code, including the recommendations for remediating them. They are conveniently categorized by weakness, according to Fluid Attacks' conceptualization. When you click on the weakness name, you are presented with sections dedicated to vulnerabilities under it. The main features of these sections are summarized below on this page. Navigate the sections of a type of vulnerability on the Fluid Attacks platform

Navigate the sections of a type of vulnerability on the Fluid Attacks platform

#### **Vulnerabilities** In the [Vulnerabilities section](https://help.fluidattacks.com/portal/en/kb/articles/see-where-vulnerabilities-are-and-more-details#See_where_vulnerabilities_are_located), you see the list of the vulnerabilities named after file paths and specific inputs/lines of code/ports where Fluid Attacks found them. Useful functions in this section include the options to define the [treatment](https://help.fluidattacks.com/portal/en/kb/articles/assign-treatments) for vulnerabilities (e.g., assign fix work to yourself or someone in your team) and request a [reattack](https://help.fluidattacks.com/portal/en/kb/articles/verify-fixes-with-reattacks) (i.e., a retest to verify whether the vulnerability was successfully remediated). To learn more about a vulnerability or use generative artificial intelligence (gen AI) to get a custom guide to remediate the vulnerability (when applicable), click on its entry in the Vulnerability column. This causes a pop-up window to appear. The following screenshot is of this window for an instance of a reported remote code execution vulnerability. Learn details of a vulnerability on the Fluid Attacks platform

Learn details of a vulnerability on the Fluid Attacks platform

Each tab in the pop-up window provides you with useful information: 1. **[Details](https://help.fluidattacks.com/portal/en/kb/articles/see-where-vulnerabilities-are-and-more-details#See_the_details_of_a_specific_vulnerability):** Description and current treatment, among other information 1. **[Severity](https://help.fluidattacks.com/portal/en/kb/articles/see-where-vulnerabilities-are-and-more-details#Learn_the_severity_of_a_specific_vulnerability):** Breakdown of the assigned severity score using the [Common Vulnerability Scoring System](https://help.fluidattacks.com/portal/en/kb/articles/glossary#CVSS) (CVSS) v4.0 1. **[Code](https://help.fluidattacks.com/portal/en/kb/articles/see-where-vulnerabilities-are-and-more-details#See_the_vulnerable_line_of_code):** The actual line(s) of code presenting the vulnerability and lines that surround it/them 1. **[Treatments](https://help.fluidattacks.com/portal/en/kb/articles/see-where-vulnerabilities-are-and-more-details#Edit_Treatment_for_a_vulnerability):** The current treatment and assigned tags with the option to change them 1. **[How to fix](https://help.fluidattacks.com/portal/en/kb/articles/see-where-vulnerabilities-are-and-more-details#Get_a_custom_guide_to_fix_the_vulnerability):** The AI-generated custom guide to remediate the vulnerability 1. **[Tracking](https://help.fluidattacks.com/portal/en/kb/articles/see-where-vulnerabilities-are-and-more-details#See_the_history_of_a_specific_vulnerability):** The treatment and reattack history #### **Description** In the [Description section](https://help.fluidattacks.com/portal/en/kb/articles/see-where-vulnerabilities-are-and-more-details#See_the_description_of_a_type_of_vulnerability) you can learn the definition of the type of vulnerability along with the security requirements that may have been violated, the impacts expected of vulnerability exploitation, the characteristics of the threat actor that may exploit it, and recommended actions to fix the code. #### **Evidence** The [Evidence section](https://help.fluidattacks.com/portal/en/kb/articles/examine-the-evidence-of-exploitability) provides supporting evidence of the existence and exploitability of the specific type of vulnerability reported. The evidence can come in the form of images or videos. #### **Tracking** The detailed treatment history of the type of vulnerability is provided in the [Tracking section](https://help.fluidattacks.com/portal/en/kb/articles/see-where-vulnerabilities-are-and-more-details#See_the_timeline_of_a_type_of_vulnerability), along with information on the number of vulnerabilities reported and remediated. #### **Records** In the [Records section](https://help.fluidattacks.com/portal/en/kb/articles/see-where-vulnerabilities-are-and-more-details#See_affected_records) you find a table with sensitive information obtained by Fluid Attacks' team of pentesters after exploiting the vulnerability in your system. The data may be financial information (e.g., account numbers), personal information (e.g., phone numbers), and technical information (e.g., access tokens). #### **Comments** [Comments](https://help.fluidattacks.com/portal/en/kb/articles/post-comments#Comment_about_a_vulnerability) is a forum-like section to communicate with Fluid Attacks about the reported vulnerabilities or to find out the outcome of reattacks. > [!TIP] > > **Note:** Comments for vulnerabilities is available for users with the [Essential](https://help.fluidattacks.com/portal/en/kb/articles/continuous-hacking-free-trial-plans-and-pricing#Continuous_Hacking_plans) plan in view mode. ### Analytics (group-level) Within the group-level [Analytics section](https://help.fluidattacks.com/portal/en/kb/articles/group-analytics), you discover graphs and figures on the status and characteristics of reported vulnerabilities and your remediation practices related to that specific group. Among the group-specific analytics are those related to the status and executions of Fluid Attacks' CI agent. ### DevSecOps Fluid Attacks offers its [CI Gate](https://help.fluidattacks.com/portal/en/kb/articles/install-ci-gate-to-break-the-build) that you can install in your CI pipelines to [break the build](https://help.fluidattacks.com/portal/en/kb/articles/prevent-the-deployment-of-builds-with-vulnerabilities) when attempting to deploy software versions with vulnerabilities into production. Breaking the build, when enabled, follows the policies set by your organization. The [DevSecOps section](https://help.fluidattacks.com/portal/en/kb/articles/view-details-of-the-security-of-your-builds) shows the details and results of recent CI Gate executions. You can select an execution to see the vulnerabilities detected in it or see the agent log. This is shown in a pop-up window with tabs corresponding to the two mentioned options. View details of agent executions on the Fluid Attacks platform

View details of agent executions on the Fluid Attacks platform

### Design Map The [Design Map](https://help.fluidattacks.com/portal/en/kb/articles/correlate-your-threat-model-to-vulnerabilities) section shows the correlations between your threat model and vulnerabilities Fluid Attacks has detected in your system. After uploading your threat model files, you can see your detailed threat descriptions matched with Fluid Attacks' vulnerability categories and their details, such as severity. This enables strategic prioritization of remediation efforts based on your specific security concerns. ### Events Fluid Attacks calls an "event" a situation that prevents testing of a part of the [target of evaluation](https://help.fluidattacks.com/portal/en/kb/articles/glossary#Target_of_Evaluation_ToE) (ToE) or its entirety. Further, Fluid Attacks categorizes events into several types, for example, "credentials issues," when the information given for authentication is invalid. In the [Events section](https://help.fluidattacks.com/portal/en/kb/articles/resolve-events-impeding-tests), you can view the events that Fluid Attacks reports to you for your prompt action. Each reported event has sections dedicated to it, as shown in the following screenshot. The main features of these sections are summarized below on this page. View details of events on the Fluid Attacks platform

View details of events on the Fluid Attacks platform

1. **[Description](https://help.fluidattacks.com/portal/en/kb/articles/resolve-events-impeding-tests#Description):** What the situation is, what part of the ToE it refers to, and whether it prevents [reattacks](https://help.fluidattacks.com/portal/en/kb/articles/verify-fixes-with-reattacks) 1. **[Evidence](https://help.fluidattacks.com/portal/en/kb/articles/resolve-events-impeding-tests#Evidence):** Images or videos that provide proof of the event 1. **[Comments](https://help.fluidattacks.com/portal/en/kb/articles/resolve-events-impeding-tests#Comments):** Forum-like space to discuss the event ### Members (group-level) > [!NOTE] > > **[Role](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles) required:** Vulnerability Manager or Group Manager In the [Members section at the group level](https://help.fluidattacks.com/portal/en/kb/articles/manage-members#Group-level_members), according to your role on the platform, you can either only view or fully manage who has access to the group and what permissions they have to use platform functions. ### Authors (group-level) By "authors" Fluid Attacks refers to the developers contributing to the code repository each month. The [Authors section](https://help.fluidattacks.com/portal/en/kb/articles/invite-contributing-developers) gives you a list of such users and informs you whether they have registered to Fluid Attacks' platform. If you have the [Group Manager](https://help.fluidattacks.com/portal/en/kb/articles/understand-roles#User_Manager_role) role, you can invite authors not yet on the platform to register. ### Inventory Inventory's [Packages section](https://help.fluidattacks.com/portal/en/kb/articles/analyze-your-supply-chain-security) helps you keep track of the third-party dependencies in your software. Thanks to it, you can find out which dependencies have [reachable vulnerabilities](https://help.fluidattacks.com/portal/en/kb/articles/find-reachable-dependency-vulnerabilities) and where you are using them, enabling you to analyze your usage of them and make informed decisions. Inventory also has a [Surface section](https://help.fluidattacks.com/portal/en/kb/articles/see-the-target-of-evaluation-status-and-sbom) gives information about the [Target of Evaluation (ToE)](https://help.fluidattacks.com/portal/en/kb/articles/glossary#Target_of_Evaluation_ToE) specified in the Scope section in regards to the present lines, inputs, packages and ports, and used languages, each category having its own section. View details of the Target of Evaluation on the Fluid Attacks platform

View details of the Target of Evaluation on the Fluid Attacks platform

### Scope In the Scope section you mainly define Fluid Attacks' Target of Evaluation (ToE). The following information is entered in this section to facilitate, or in some cases enable, security testing with Fluid Attacks' Continuous Hacking: - [**Git Repositories**](https://help.fluidattacks.com/portal/en/kb/articles/manage-roots)**:** Git repositories where you version the application’s source code - [**Environments**](https://help.fluidattacks.com/portal/en/kb/articles/manage-roots#Manage_Environments)**:** URLs where applications are deployed - **[IP Roots](https://help.fluidattacks.com/portal/en/kb/articles/manage-roots#Manage_IP_Roots):** Web applications reachable through specified IP addresses (only in groups subscribed to [black-box testing](https://help.fluidattacks.com/portal/en/kb/articles/glossary#Black_box)) - **[URL Roots](https://help.fluidattacks.com/portal/en/kb/articles/manage-roots#Manage_URL_Roots):** Dynamic environments already deployed on a web server (provided only in groups subscribed to [black-box testing](https://help.fluidattacks.com/portal/en/kb/articles/glossary#Black_box)) - [**Files**](https://help.fluidattacks.com/portal/en/kb/articles/manage-a-group-s-configuration#Manage_files_shared_with_Fluid_Attacks)**:** Mobile applications, or any documents (i.e., software documentation) that could help understand or use the system under evaluation - [**Portfolio Tags**](https://help.fluidattacks.com/portal/en/kb/articles/sort-groups-into-portfolios#Create_a_portfolio)**:** Keywords to build [portfolios](https://help.fluidattacks.com/portal/en/kb/articles/sort-groups-into-portfolios), thus getting information and analytics for groups that share the tag - [**Information**](https://help.fluidattacks.com/portal/en/kb/articles/manage-a-group-s-configuration)**:** General information about your company, useful, for example, for generating complete [security testing certificates](https://help.fluidattacks.com/portal/en/kb/articles/download-a-report-of-detected-vulnerabilities) - **[Group Settings](https://help.fluidattacks.com/portal/en/kb/articles/manage-a-group-s-configuration):** Specific configuration options for the group, i.e., [group context](https://help.fluidattacks.com/portal/en/kb/articles/manage-a-group-s-configuration#Manage_a_groups_information_for_context), group disambiguation, [DevSecOps agent token management](https://help.fluidattacks.com/portal/en/kb/articles/install-the-ci-agent-to-break-the-build), function for the user to [unsubscribe from the group](https://help.fluidattacks.com/portal/en/kb/articles/leave-group), and function to [delete the group](https://help.fluidattacks.com/portal/en/kb/articles/create-and-delete-groups#Delete_a_group) ## Platform header items The top part of Fluid Attacks' platform, like the collapsible menu, is always visible as you navigate the application. Its functions include providing you access to your tasks and user [information](https://help.fluidattacks.com/portal/en/kb/articles/explore-the-user-menu) and [settings](https://help.fluidattacks.com/portal/en/kb/find-security-vulnerabilities/use-the-platform/manage-your-user-settings). Use the Fluid Attacks platform top menu

### Organization menu This drop-down menu allows you to change between your organizations on Fluid Attacks' platform, in case you have more than one. ### Group search box You can use the search box in the platform's header to type a group name within the organization and be directed to it upon tapping the Enter / Return key. ### AI Agent Chat with the [AI Agent](https://help.fluidattacks.com/portal/en/kb/articles/ask-the-ai-agent) to get information quickly about your organization or group, or vulnerability management advice, leveraging Fluid Attacks' generative AI. ### To do This item in the platform header takes you, upon click, to the [To do section](https://help.fluidattacks.com/portal/en/kb/articles/see-vulnerabilities-assigned-to-you), which has a table showing general information about the vulnerabilities which you are responsible to remediate. ### Downloads Upon clicking this item, you can find [reports recently requested ready for downloading](https://help.fluidattacks.com/portal/en/kb/articles/access-recent-downloads). Each item is kept available in your download history for seven days. ### News Clicking on this item opens a pop-up window that shows the headlines of Fluid Attacks' posts on new functions of the platform, enhancements to Fluid Attacks' scanners, and more. These preview texts link to the corresponding complete posts at Fluid Attacks' [News page](https://news.fluidattacks.tech/). The pop-up window also presents you with the options to [subscribe to Fluid Attacks' News](https://help.fluidattacks.com/portal/en/kb/articles/subscribe-to-news) and request a new feature. ### User menu The option furthest to the right on the platform header is your [user menu](https://help.fluidattacks.com/portal/en/kb/articles/explore-the-user-menu), which you can open by clicking on your name. Apart from your role, email, and phone number, the menu shows your individual user options. Below is how it looks like to Group Managers.

Use user menu on the Fluid Attacks platform

#### View as client > [!NOTE] > > A Fluid Attacks staff role is required. This option allows you to view the platform as a client would. #### Feature preview > [!NOTE] > > A Fluid Attacks staff role is required. This option allows you to use platform features that are not yet generally available. #### API token This option allows you to manage the API token used for retrieving or modifying data and triggering actions to build custom integrations. #### Notifications Clicking on this option directs you to the [Notifications section](https://help.fluidattacks.com/portal/en/kb/articles/enable-and-disable-notifications), which displays and allows you to manage your preferences on the emails that you receive from Fluid Attacks informing you of activity such as newly reported vulnerabilities, reported events that impede testing, and more. View notifications configuration on the Fluid Attacks platform

View notifications configuration on the Fluid Attacks platform

#### Trusted devices The [platform login](https://help.fluidattacks.com/portal/en/kb/articles/sign-up-and-authentication#Login_authentication) process allows you to opt for trusting the device you are using so that you are not asked for a one-time password while using that device in the following 180 days. By clicking on the [Trusted devices](https://help.fluidattacks.com/portal/en/kb/articles/explore-the-user-menu#Manage_your_trusted_devices) option in your user menu, you are directed to the section where you can see a list of the devices and information such as the date of the most recent login. Manage trusted devices on the Fluid Attacks platform

Manage trusted devices on the Fluid Attacks platform

#### Mobile Having your phone registered to the platform is very useful, as it enables the delivery of verification codes to your phone, thus allowing an option of [two-factor authentication](https://help.fluidattacks.com/portal/en/kb/articles/sign-up-and-authentication#Login_authentication), the [generation of reports](https://help.fluidattacks.com/portal/en/kb/articles/download-a-report-of-detected-vulnerabilities) and more. #### Ethics Hotline It is important for Fluid Attacks to allow reporting (anonymous or otherwise) of matters that concern ethics. Clicking on the Ethics Hotline option of the user menu, you are directed to an equally safe web application where you can report complaints on your behalf or other's. However, you can also use this option to send suggestions, questions or even thank-you messages. #### Delete account This option within the user menu allows you to safely delete your account, meaning that your information is completely erased with no option of anyone retrieving it. #### Log out This option within the user menu is pretty self-explanatory. Click it and, after confirmation, you are logged out of the platform. #### Platform version At the bottom of the user menu, you can see the commit hash ID (a commit's unique identifier) that corresponds to the Fluid Attacks platform's latest update. You can click on the commit hash to see it on GitLab. By clicking it on GitLab, you can learn the specific lines of code that were changed, the developer who made the change, what was removed and added, and in what file. > [!TIP] > > **Free trial** > Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your [21-day free trial](https://app.fluidattacks.com/SignUp) and discover the benefits of the [Continuous Hacking](https://fluidattacks.com/services/continuous-hacking/) [Essential plan](https://fluidattacks.com/plans/). If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out [this contact form](https://fluidattacks.com/contact-us/).