Navigation and Layout

Overview

Fencer organizes its interface around a persistent sidebar navigation that groups features into logical sections. Every page you visit operates within the context of a single organization, and the sidebar shows only the pages your role can open. Understanding this layout helps you find the right tool quickly and move efficiently between tasks.

Prerequisites

• You have an active Fencer account and belong to at least one organization.
• You have completed the initial onboarding flow (see Onboarding Walkthrough).

How it works

All organization-scoped pages live under the URL pattern /a/<organization-slug>/.... When you select an organization, Fencer sets that organization as your active context and every navigation link, data query, and permission check happens within that scope.

The sidebar has a header row (your organization name, plus the Search, Inbox, and organization switcher icons), four primary groups — Main, Posture, Operations, and Admin — and a footer with the Support button and your user menu.

Each link appears only if your role holds the permission its page needs; a link your role cannot use is left out rather than shown disabled, and a section with no links left is hidden. Links to paid features your plan does not include still appear, dimmed and marked with a lock icon. Use the Collapse sidebar button at the top of the page (or press [) to shrink the sidebar to icons.

Navigation sections

Main

The Main section contains your most-used entry points:

1. Home — your organization dashboard with a posture summary, a vulnerability burndown chart, Next Tasks, Recommended actions, and (for Administrators) the onboarding checklist.
2. Vulnerabilities — the grouped vulnerability listing where you triage and manage findings.
3. Advisory — advisories generated by auditing your mapped architecture for attack paths and threats.
4. Threat model — appears only when it is enabled for your organization.
5. Assets — your asset resources, with an Architecture graph of their relationships and an Inventory list.
6. Agents — activity from the AI agents working in your organization, including automatic fixes (paid feature).

Home and Vulnerabilities need vulnerabilities:read; Advisory, Threat model, and Assets need assets:read; Agents needs agents:read.

Posture

The Posture section covers your security posture across different asset types. Every Posture link is a paid feature, shown locked when your plan does not include it:

1. Infrastructure — cloud infrastructure scanning results (AWS, Azure, GCP, Cloudflare, and more).
2. SaaS — security checks for connected SaaS accounts.
3. Code — code analysis and repository vulnerability scanning.
4. Secrets — exposed secrets detected in your repositories and configurations.
5. Artifacts — container images and OCI artifact scanning.
6. Dependencies — software dependency tracking and vulnerability correlation.
7. Domains — DNS, SSL, DMARC/SPF/DKIM, and phishing detection for your domains.
8. Network — network services discovered on your cloud accounts and domains.
9. Application — runtime web application security testing.
10. Endpoint — device and endpoint security posture from MDM integrations.
11. Identities — the people and service accounts across your connected providers.
12. Penetration Testing — penetration tests and their findings.

Secrets and Dependencies need vulnerabilities:read, Identities needs identities:read, and Penetration Testing needs scans:read; the rest need assets:read.

Operations

The Operations section is focused on proactive security monitoring:

1. Threat Intelligence — the Threat Feed of security advisories from CISA and GitHub.
2. Threat Hunting — explore raw, normalized security events to investigate activity (paid SIEM feature).
3. Security Monitoring — the SIEM detections raised by your detection rules, and the rules themselves (paid SIEM feature).
4. Network Flows — a map of network traffic between your endpoints and providers, built from your flow logs (paid SIEM feature).

Threat Intelligence needs vulnerabilities:read, Threat Hunting needs hunt:read, and Security Monitoring and Network Flows need detections:read.

Admin

The Admin section is visible only to roles that can view organization settings (org_settings:read) — Administrators by default, and any custom role granted it:

1. Integrations — connect and manage third-party integrations (source control, cloud providers, notifications, compliance tools). Needs integrations:read.
2. Vendor Catalog — track and manage your software vendors. Needs vendors:read.
3. Settings — organization settings, with the Organization, Policy, Emails, Notifications, Automations, Authentication, Service Accounts, and Personal API keys tabs. Automations needs automations:read; Service Accounts and Personal API keys need api_keys:read.
4. Team — invite members, assign roles, and manage memberships (the Members and Roles tabs). Needs members:read; a role holding only roles:read opens straight to Roles.
5. Billing — your subscription, with the Billing tab (for roles that can edit organization settings), Plans, and Usage.

Switching organizations

If you belong to multiple organizations, an organization switcher appears in the sidebar header next to the organization name. To switch organizations:

1. Click the selector icon (Switch organization) in the top-left area of the sidebar, next to your current organization name.
2. A popover appears listing all your organizations with logos and names.
3. Use the Search organizations… field to filter the list by name.
4. Click an organization to switch to it. The current organization is indicated with a checkmark.

The URL updates to reflect the new organization slug and all data reloads within that context. You can also press O then W to pick an organization from the command palette.

Inbox

The bell icon in the sidebar header opens your in-app inbox of notifications (press G then I). Your personal notification rules decide what arrives there; see Notifications and Alerts.

Search and command palette

The Search icon in the sidebar header opens the Search page (press G then F).

Press ⌘K (Ctrl+K on Windows and Linux), or /, to open the command palette from anywhere in the app. It lists every page the sidebar offers you, plus commands such as Switch organization and Toggle sidebar. Type at least two characters to also search your vulnerabilities, detections, secrets, dependencies, identities, assets, integrations, and scans. On a detail page, or in a list with a row highlighted or selected, ⌘K opens the actions for that item instead.

Keyboard shortcuts

Press ? (or ⌘/) to open the Keyboard Shortcuts dialog, which lists every shortcut. The most useful ones:

• G then a letter jumps to a page — for example G D for Home, G V for Vulnerabilities, and G S for Settings. Hover over a sidebar link to see its shortcut.
• O then W opens the organization picker in the command palette.
• [ collapses or expands the sidebar.
• ⌘⇧C (Ctrl+Shift+C) copies the current page’s URL.
• In lists, J and K move between rows, Enter opens one, and F opens the filters.

User menu

At the bottom of the sidebar, your avatar and display name are shown. Clicking this area opens a menu with:

• User settings — your Profile, Account, Security, API keys, and Notifications (your personal notification rules).
• Email us — contact Fencer support.
• Appearance — choose Light, Dark, or Auto (follows system preference).
• Sign out — end your session.

The Support button just above the user menu opens a support chat with the Fencer team, or an email to support if chat is unavailable.

Troubleshooting

• Missing navigation links — a link appears only when your role holds the permission its page needs, and the Threat model link only when it is enabled for your organization. If you expect to see a link that is missing, ask your organization admin to check your role. A dimmed link with a lock icon is a paid feature; check your plan under Admin > Billing.
• Cannot access a page — if you receive a permission error, your role may not include the required ability. See Roles and Permissions for details on what each role can access.
• Organization switcher not visible — the switcher only appears when you belong to more than one organization.

Related pages

• Platform Overview
• Roles and Permissions
• Onboarding Walkthrough
• Organization Settings
• Team and Member Management