The Graph Dashboard
The Graph Dashboard (/graph) is the primary interface of RedAmon. This is where you visualize your attack surface, launch scans, interact with the AI agent, and explore findings. This page gives you a complete tour of every element on screen.
- Select a project from the Project Selector dropdown in the top navigation bar (or navigate from the Projects page)
- Click "Red Zone" in the top navigation bar (the crosshair icon)
- You'll land on the Graph page with your selected project loaded
The Graph page is organized into several sections:
| Area | Location | Purpose |
|---|---|---|
| Global Header | Top | Navigation, project selector, theme toggle |
| Graph Toolbar | Below header | Scan controls, view toggles, agent status |
| View Tabs | Below toolbar | Switch between Graph Map and Data Table |
| Main Canvas | Center | 2D/3D graph visualization or data table |
| Bottom Bar | Bottom | Node type legend with filtering |
| Node Drawer | Left side (on click) | Detailed properties of selected node |
| Logs Drawer | Right side (during scans) | Real-time scan logs |
| AI Agent Drawer | Right side (on toggle) | AI chat interface |
The top navigation bar is present on every page.
| Element | Description |
|---|---|
| RedAmon Logo | Click to go home |
| Projects (folder icon) | Navigate to the Projects management page |
| Red Zone (crosshair icon) | Navigate to the Graph Dashboard (current page) |
| Project Selector | Dropdown to switch between projects. Shows project name and target domain. Selection persists across sessions |
| Theme Toggle | Switch between light and dark mode |
| User Avatar | Shows the current user |
The toolbar is organized into two rows with action groups.
| Control | Description |
|---|---|
| 2D / 3D Toggle | Switch between 2D force-directed and 3D WebGL graph rendering |
| Labels Toggle | Show/hide node name labels on the graph |
| Target Info | Displays the current project's target domain and subdomain configuration |
| Stealth Indicator | Shows if stealth mode is active (passive-only scanning) |
| PAUSE ALL | Emergency button (red/yellow) — instantly freezes all running pipelines (Recon, GVM, GitHub Hunt) and stops all AI agent conversations. Disabled when nothing is running. Shows "PAUSING..." with a spinner while the operation is in progress |
When to use PAUSE ALL: If you notice the recon, GVM scanner, or AI agent are targeting something unintended, click this button immediately. It freezes containers via Docker cgroups (no data loss) and cancels all running agent tasks. You can resume individual pipelines afterwards using their respective Resume buttons.
The second row contains four color-coded action groups:
| Button | Description |
|---|---|
| Start Recon | Launches the 6-phase reconnaissance pipeline. Shows a confirmation modal first. Spinner appears while running |
| Pause (pause icon) | Freezes the recon container. Only visible while running |
| Stop (square icon) | Stops and removes the recon container permanently. Only visible while running or paused |
| Resume | Resumes a paused recon from where it left off |
| Logs (terminal icon) | Opens the logs drawer to show real-time recon output. Only visible during an active scan |
| Download (download icon) | Download the recon results as JSON. Only available after recon completes |
| Button | Description |
|---|---|
| GVM Scan | Launches a GVM/OpenVAS network vulnerability scan. Disabled in stealth mode |
| Pause / Stop / Resume | Same lifecycle controls as Recon (see above) |
| Logs (terminal icon) | Opens the GVM logs drawer |
| Download (download icon) | Download GVM results as JSON |
| Button | Description |
|---|---|
| GitHub Hunt | Launches the GitHub secret scanning module |
| Pause / Stop / Resume | Same lifecycle controls as Recon (see above) |
| Logs (terminal icon) | Opens the GitHub hunt logs drawer |
| Download (download icon) | Download GitHub hunt results as JSON |
| Element | Description |
|---|---|
| Conversation Badge | Shows the number of active AI agent conversations |
| Phase Badge | Current agent phase (Informational / Exploitation / Post-Exploitation) with phase-specific color |
| Step Counter | Current iteration number of the agent |
| AI Agent Button | Toggle the AI Agent drawer open/closed |
Just below the toolbar, two tabs let you switch views:
| Tab | Icon | Description |
|---|---|---|
| Graph Map | Waypoints | The interactive graph visualization (default) |
| Data Table | Table | A searchable, sortable table of all nodes |
When in Data Table mode, additional controls appear:
- Search input — filter rows by any text
- Row count — shows filtered vs. total rows
- Export to XLSX — download the entire table as an Excel file
The graph canvas is the main visualization area where your attack surface is displayed as an interactive node-link diagram.
- Pan: Click and drag the background
- Zoom: Mouse scroll wheel
- Select node: Click on any node to open the Node Drawer
- Nodes are color-coded by type (see Bottom Bar)
- Nodes are positioned by a force-directed layout algorithm
- Rotate: Click and drag
- Pan: Right-click and drag
- Zoom: Mouse scroll wheel
- Select node: Click on any node
- Provides a more immersive view for large graphs
During active reconnaissance, the graph auto-refreshes every 5 seconds to show new nodes as they're discovered. The refresh stops when the scan completes.
The data table provides a flat, searchable view of all nodes in the graph:
- Columns: Node type, name, and key properties
- Row expansion: Click a row to see all properties in detail
- Global search: Filter across all columns
- Sorting: Click column headers to sort
-
Excel export: Download the entire dataset as
.xlsx
The bottom bar displays a scrollable row of color-coded chips, one for each node type present in the graph.
| Feature | Description |
|---|---|
| Color chips | Each node type has a distinct color matching the graph |
| Count badges | Shows how many nodes of each type exist |
| Click to filter | Click a chip to show/hide that node type on the graph |
| All / None | Quick actions to show all or hide all node types |
This is especially useful for large graphs where you want to focus on specific node types (e.g., only Vulnerabilities and CVEs).
When you click on a node in the graph (or a row in the data table), the Node Drawer slides in from the left.
| Element | Description |
|---|---|
| Type badge | Color-coded label showing the node type (e.g., "Subdomain", "Vulnerability") |
| Node ID | The internal identifier |
| Node name | The display name (e.g., domain name, IP address, CVE ID) |
| Properties | All properties of the node, formatted and labeled |
| Delete button | Only shown for Exploit nodes — allows removing a specific exploit record |
Internal fields like
project_idanduser_idare hidden automatically.
During any active scan (Recon, GVM, or GitHub Hunt), a Logs Drawer slides in from the right showing real-time output.
| Element | Description |
|---|---|
| Phase indicator | Shows the current scanning phase (e.g., "Phase 2: Port Scanning") |
| Phase number | Progress through the pipeline |
| Log messages | Real-time streaming of scan output |
| Clear button | Clear the current log display |
Each scan type (Recon, GVM, GitHub Hunt) has its own independent logs drawer, toggled by the respective "Logs" button in the toolbar.
The AI Agent drawer is the most feature-rich panel. It provides a full chat interface for interacting with the autonomous AI agent. See the dedicated AI Agent Guide for a complete walkthrough.
Now that you're familiar with the Graph Dashboard, learn how to:
- Run your first reconnaissance to populate the graph
- Use the AI Agent to analyze findings and perform automated pentesting