---
title: "How does Cynergy work?"
canonical: "https://kb.cynergy.app/space/WC/719126567/How%20does%20Cynergy%20work%3F"
format: markdown
---
1. **You onboard the platform** – You provide the main domain (client’s email associated) and a list of additional Top-Level Domains of your organization or subsidiaries and 3rd parties.
2. **Automated discovery-** After the onboarding, Cynergy starts an initial Discovery scan of your domains and Employees. It is an entirely passive and not intrusive scan, you begin to discover your external surface, The same way hackers do [Reconnaissance ](https://attack.mitre.org/tactics/TA0043/)
3. **Automated Vulnerability Assessment**- An automated VA looks for potential vulnerabilities in a Black-Box manner. looking for cloud misconfigurations, Web Vulnerabilities, and Infrastructure vulnerabilities.
4. **Automated validation**- Cynergy can automatically validate the findings to reduce false positives and show your potential breach points.
5. **Advanced prioritization & reporting**-  what's exposed and needs to be fixed.
6. **Call for action **– Cynergy will provide you with the different options to mitigate the identified findings.
7. **Mitigation management**- Manage and create projects to close and fix your potential breach points automatically.

![image](media://2b54db7a-a82f-4783-92ef-061ee405580c)