> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xpanse/attack-surface-testing/set-up-attack-surface-testing.md).

# Set up Attack Surface Testing

To set up Attack Surface Testing for the first time, complete the following tasks:

1. Verify that you have edit permission for **Vulnerability Testing**.

   To check your permissions, go to **Settings** → **Configurations** → **Access Management** → **Roles**, select the role. Select the **Components** tab, and find **Vulnerability Testing** under **Incident Response** → **Detections.**
2. [Accept the End-User Licensing Agreement (EULA).](#UUID-f4760a6b-f87c-5407-99a3-c893438622f9_section-idm4563085109206434295543842803)

   The EULA gives Cortex Xpanse permission to conduct attack surface testing scans. You only need to accept the EULA once. After accepting the EULA the Vulnerability Testing Configuration page will open automatically so you can select the targets for testing.
3. [Select targets for attack surface testing](/cortex-xpanse/attack-surface-testing/select-targets-for-attack-surface-testing.md).

   In this task, you'll select the directly-discovered services upon which Cortex Xpanse will run attack surface tests. After the initial set-up, you can update this set of targets anytime.

After you complete the set-up tasks, Cortex Xpanse will begin daily attack surface testing scans. You can perform the following post-setup tasks to access attack surface test results and change your attack surface testing configuration.

* [View attack surface test results](/cortex-xpanse/attack-surface-testing/view-attack-surface-test-results.md)
* [Enable new attack surface tests by default](/cortex-xpanse/attack-surface-testing/enable-new-attack-surface-tests-by-default.md)
* [View attack surface tests](/cortex-xpanse/attack-surface-testing/view-attack-surface-tests.md)
* [View source IP addresses for Attack Surface Testing scans](/cortex-xpanse/attack-surface-testing/view-source-ip-addresses-for-attack-surface-testing-scans.md)

## Accept the End-User Licensing Agreement (EULA)

1. Navigate to **Rules** → **Vulnerability Testing**.
2. On the Welcome to Vulnerability Testing page, click **Next**.
3. Read the End-User Licensing Agreement and click **Accept Terms**.

After accepting the terms of the EULA, the **Vulnerability Testing Configuration** page will open where you can select the set of services to be tested.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xpanse/attack-surface-testing/set-up-attack-surface-testing.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.