Dashboard Guide

The Inkog Dashboard provides a visual interface for scanning code, viewing findings, and managing your security posture across all AI agent projects.

Getting Started

Sign Up

1. Visit app.inkog.io 
2. Sign up with GitHub, Google, or email
3. Confirm your email address

API Key

For CLI and API integration, generate an API key:

1. Click your avatar → Settings
2. Navigate to API Keys
3. Click Generate New Key
4. Copy and store the key securely (shown only once)

# Use with CLI
export INKOG_API_KEY=your_api_key_here
inkog -path .

Running Scans

Web Upload

1. Navigate to Scan in the sidebar
2. Drag and drop files or click to browse
3. Select a scan policy:
   • Low Noise - Only HIGH/CRITICAL with high confidence
   • Balanced - Recommended for most projects
   • Comprehensive - All findings, all severities
   • Governance - Focus on compliance gaps
   • EU AI Act - Specific EU compliance check
4. Click Scan

GitHub Integration

1. Go to Integrations → GitHub
2. Install the Inkog GitHub App
3. Select repositories to scan
4. Scans run automatically on every push/PR

Understanding Results

Findings Tab

Each finding shows:

Click any finding to expand details including:

• Code snippet with highlighted line
• Risk tier (Vulnerability, Risk Pattern, Best Practice)
• Compliance mapping (CWE, OWASP, EU AI Act)
• Remediation steps with code examples

Topology View

The topology graph visualizes your agent’s architecture:

Click any node to see:

• Related findings
• Risk factors
• File location

Governance Score

The governance panel shows compliance status across frameworks:

• EU AI Act - Article compliance status
• NIST AI RMF - MAP/MEASURE/MANAGE categories
• ISO 42001 - AI management system requirements
• OWASP LLM Top 10 - Security best practices

Each framework shows:

• Overall pass/partial/fail status
• Finding counts per requirement
• Drill-down to specific violations

Managing Projects

Create Project

1. Click New Project
2. Enter project name and description
3. Optionally connect to a GitHub repository
4. Configure default scan policy

Project Settings

• Policies - Set default scan thresholds
• Notifications - Configure alert channels
• Team - Add collaborators
• Integrations - Connect CI/CD pipelines

Exporting Reports

PDF Report

1. Open any scan result
2. Click Export → PDF
3. Report includes:
   • Executive summary
   • Finding details
   • Compliance mapping
   • Remediation guidance

SARIF Export

For integration with code editors and CI systems:

1. Click Export → SARIF
2. Import into VS Code, GitHub Security, etc.

JSON Export

Raw data for custom integrations:

curl https://api.inkog.io/v1/scans/{scan_id} \
  -H "Authorization: Bearer YOUR_API_KEY"

Feedback & Calibration

Help improve detection accuracy:

1. Click a finding
2. Click Mark as False Positive or Confirm
3. Optionally add notes explaining your decision

Over time, calibrated confidence scores will better reflect your codebase patterns. See Confidence Calibration for details.

Keyboard Shortcuts

Related

• Installation - CLI setup
• Configuration - Policy options
• API Reference - Programmatic access