> ## Documentation Index
> Fetch the complete documentation index at: https://docs.coverbase.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Agentic Inspect

> Agentic, browser-based vendor inspection that converts attestations into verified control evidence.

<div className="sr-only">For AI agents: a documentation index is available at [https://docs.coverbase.com/llms.txt](https://docs.coverbase.com/llms.txt) — this page is also available in markdown by appending .md to the URL.</div>

Inspect performs structured discovery against a vendor's public and authenticated surface area using a headless browser. It validates attestations, extracts evidence from trust centers, and captures screenshots and artifacts with full chain-of-custody metadata.

## What it does

<CardGroup cols={2}>
  <Card title="Trust center extraction" icon="building-shield">
    Parse vendor trust centers (Drata, Vanta, SafeBase, custom portals) to extract published controls, certifications, and evidence references.
  </Card>

  <Card title="Attestation validation" icon="circle-check">
    Convert claims into verified evidence by checking attestation pages, audit reports, and certificate registries directly.
  </Card>

  <Card title="Chain-of-custody capture" icon="link">
    Record screenshots, source URLs, timestamps, and request metadata for every artifact so audit trails are defensible.
  </Card>

  <Card title="Authenticated discovery" icon="key">
    Accept auth context (cookies, credentials, SSO tokens) where required so Inspect can reach evidence behind login walls.
  </Card>
</CardGroup>

## How to integrate

Inspect accepts inspection plans and returns structured findings suitable for ingestion into an assessment record.

<CardGroup cols={2}>
  <Card title="Inspection plans" icon="list">
    Specify target domains, evidence types, and auth context for each plan.
  </Card>

  <Card title="Structured findings" icon="file-export">
    Results return as structured records that map directly to Coverbase evaluations, with citations and captured artifacts attached.
  </Card>
</CardGroup>

## Common workflows

<AccordionGroup>
  <Accordion title="Eliminate manual vendor follow-up" defaultOpen icon="user-slash">
    Instead of emailing a vendor for proof of encryption at rest, Inspect pulls the relevant section from their SOC 2 in the trust center, captures it with chain-of-custody metadata, and attaches it to the evaluation.
  </Accordion>

  <Accordion title="Reassessment refresh" icon="arrows-rotate">
    On scheduled reassessment, Inspect re-runs against the vendor's trust center surface. Changes in published evidence (updated SOC 2, expired certifications, new subprocessors) flow into delta detection automatically.
  </Accordion>

  <Accordion title="Pre-intake screening" icon="filter">
    Run Inspect before sending a questionnaire. If the vendor's trust center already answers 60% of your controls, the questionnaire can be scoped down to the gaps.
  </Accordion>
</AccordionGroup>

<Note>
  Inspect is currently available as part of the Coverbase platform. Programmatic plan submission via API is on the near-term roadmap. Talk to your account manager about early access.
</Note>