Sign In to Cobalt

Even if you haven’t yet purchased Cobalt credits, this page (and document) can help you visualize how you can set up a pentest with the Cobalt UI.

You’ve just received an email with the following title:

Welcome to the Cobalt Platform: Let's Get Started

Open the email. It should include a link to Get Started:

Now you can:

1. Select the link in your email.

2. From the webpage that appears, create a password. Follow the complexity requirements on the screen. We require passwords with at least:

   • Eight (8) characters
   • One (1) uppercase letter
   • One (1) lowercase letter
   • One (1) digit

   We also include a link to our Terms and Conditions.

3. Once you’ve set a password, you should see the Cobalt app.

4. Next time you can sign in to Cobalt in the following ways:

   • From the Sign In page, with:
     • A username and password. Your username is your email address.
     • A Google account that you used to sign in to Cobalt
       
   • Through SAML SSO, if configured

SAML SSO

We support single sign-on (SSO) based on Security Assertion Markup Language 2.0 (SAML 2.0). SAML-based single sign-on (SSO) is available to all PtaaS tiers.

Once your Organization Owner has configured SAML SSO, you need to sign in to Cobalt through the identity provider (IdP) instead of the Cobalt Sign In page. This affects the following users:

• Organization Owner
• Organization Member
• Pentest Team Member

Learn how Organization Owners can configure SAML SSO.

Two-Factor Authentication

We support two-factor authentication (2FA). If you’re using SAML SSO to sign in, you don’t need to turn on 2FA.

• If your organization enforces all users to enable 2FA, configure it upon signing in. Follow steps 3–5 from the instruction in Enable Two-Factor Authentication.
• We recommend that you enable 2FA even if your organization doesn’t enforce it.

Next Step

You can start defining your assets. Select New Asset to proceed.