Sessions & Collaboration

Sessions are the central organizing unit in CoordOps Server. Each session represents a penetration testing engagement, with shared access for the team and a structured place to store findings and assets.

Collaboration Features

  • Session Management: Create and manage engagement sessions with multiple team members
  • Real-time Collaboration: Multiple users can work on the same session simultaneously
  • User Management: Role-based access control and session permissions

Session Management

Sessions are the central organizing unit in CoordOps Server. Each session represents a penetration testing engagement:

  • Session States: Created, Started, Review, Completed
  • Session Details: Name, host/client, date ranges, and team members
  • Access Control: Users can only access sessions they've been granted permission to
  • Archive Capability: Archive completed sessions to keep workspace organized

Host & Service Tracking

Track discovered infrastructure throughout the engagement:

  • Host Details: IP addresses, hostnames, operating systems
  • Service Inventory: Ports, protocols, and identified services
  • Linked Findings: Associate vulnerabilities with specific hosts
  • Service-by-Host View: Organized view of discovered services

Creating Your First Session

  1. Navigate to Sessions from the main menu
  2. Click Create New Session
  3. Enter session details (name, host, dates)
  4. Add team members who should have access
  5. Click Create to initialize the session

When creating a session you can optionally auto-generate tasks so the engagement starts with a ready-made checklist on the Task Board.

Session Details

The Session Details page is the hub for an engagement. From here you can reach everything collected for the session and drill into individual records:

  • Commands — every command logged to the session (from the console, GUI, or workers)
  • Services & NFS Exports — discovered services, grouped by host
  • Logs — captured tool logs
  • Notes — engagement notes
  • Findings — vulnerabilities documented for the session
  • AI Logs — a history of AI interactions
  • Web Agent Runs — results from the AI web agent
  • Active Directory — imported AD enumeration data
  • Searchsploit / WhatWeb — imported results from those tools

Use Edit to update a session's name, host/client, dates, and team members, and Archive to move a completed engagement out of the active workspace.

Record Detail Views

Clicking any item on the Session Details page opens a focused detail view for that record. Each shows the full content and its links back to the host, service, or finding it relates to:

Detail view Shows
Command Details The full command, its output, host/service context, and options to attach it to findings or evidence
Service Details A single service's ports, protocol, banner, and linked findings
Log Details A captured log entry in full
Note Details A single engagement note
AI Details One AI interaction (prompt and response)
Web Agent Details An AI web-agent run, including its audit output and generated narratives
Searchsploit Details An imported Searchsploit result
WhatWeb Details An imported WhatWeb fingerprinting result

Task Board

The Task Board is a per-session board for planning and tracking engagement work.

  • Tasks move through status columns as work progresses
  • Assign tasks to team members
  • Add notes, edit titles/descriptions, and create or delete tasks
  • Generate a starter set of tasks automatically when the session is created

The board keeps a shared, at-a-glance view of who is doing what across the team.

Hosts & Services

Discovered infrastructure is tracked at the session level:

  • Hosts — the Hosts view lists every host in the session; open a host's Details to see its addresses, hostnames, OS, notes, services, and NFS export count. Hosts can be added manually or imported.
  • Services by Host — services grouped under each host, with ports, protocols, and identified service names.
  • NFS Exports by Host — discovered NFS exports organized by host.

Linking findings to specific hosts keeps impact clearly scoped in the final report.

Active Directory

For AD engagements the server can import and browse enumeration data:

  • AD Enumeration Details — review imported Active Directory enumeration snapshots and download the raw enumeration or Certipy JSON.
  • Active Directory Explorer — an interactive browser over the imported AD data: filter and page through users, computers, groups, and memberships; review RPC exposure and Certipy results; compare principal differences across snapshots; and export user lists to text.

Uploaded Files

Each session has an Uploaded Files store for screenshots, tool output, exports, and other artifacts.

  • Upload one or more files to the session (with an optional description)
  • Preview images, text, and PDFs directly in the browser
  • Download or Delete any file
  • Files uploaded here are also available to attach to Evidence Bags and to embed in finding/report content

Evidence Bags

Group the files, commands, and notes that prove a finding into per-session Evidence Bags. See Evidence Bags for details.