Query Mode
Ask the AI Assistant plain-language questions about your assets, risks, ports, and technologies in Query Mode.
Overview
Query Mode is the default mode of the AI Assistant. It answers questions about your assets, risks, technologies, and relationships. You do not write a graph query yourself.
Query Mode does not run scans or change data. It needs AI Inference on for the account. Only an Analyst or an Admin can open the AI Assistant. A Read-only user does not see that tab.
What You Can Ask
The AI Assistant can answer questions about data in your account:
- Asset inventory — "How many assets do I have?" / "Show me all domain assets" / "List assets with open port 443"
- Risk assessment — "What are my critical risks?" / "Show me the highest priority findings" / "How many open vulnerabilities do I have?"
- Technology landscape — "What technologies are running across my assets?" / "Which assets run Apache?"
- Relationship mapping — "What ports are open on example.com?" / "Show me risks associated with this IP address"
- Cloud resources — "List my AWS resources" / "Show Azure resources with public access"
- Job status — "What scans are running?" / "Show me recent scan results"
How It Works
When you send a message in Query Mode, the AI Assistant:
- Activates relevant skills — Loads domain-specific knowledge for the entity types in your question (risks, assets, ports, technologies, etc.)
- Constructs a graph query — Translates your natural language into a structured query against the Neo4j graph database
- Executes the query — Runs the query against your account. A page returns 100 results by default, and at most 1000.
- Presents factual results — Returns exactly what the data shows: counts, values, entity details, and relationships
Strict Output Guidelines
Query Mode enforces strict output constraints to maintain data integrity:
- Reports only factual information directly from query results
- Does not infer trends, patterns, or correlations unless explicitly present in the data
- Does not speculate about causes, implications, or future outcomes
- Does not provide recommendations, action items, or prioritization advice
This constraint ensures that Query Mode is a reliable data retrieval tool, not an opinion generator. For analysis, recommendations, and actionable operations, enable Agent Mode.
Available Tools
Tool
Purpose
Query
Execute graph queries against the Neo4j database for any entity type
Schema
Inspect database schema to understand available fields and relationships
Capabilities
List available security scanning capabilities
Activate Skill
Load domain-specific knowledge for accurate query construction
Report
Generate formatted security reports from query results
Executive Summary
Generate tenant-level executive summary with risk posture overview
Accessing the AI Assistant
- Click the AI Assistant tab on the Insights page
- The assistant opens in Query Mode. The mode label is Query.
- Type your question in natural language and press Enter
- Previous conversations are listed in the sidebar for easy reference
Prerequisites
- AI Inference has to be on for the account. If it is off, the assistant is locked and the title is AI Assistant Disabled.
- Only an Analyst or an Admin can open the AI Assistant. A Read-only user does not see the tab.
Was this helpful?
More in AI Enablement
AI OverviewReconnaissance AgentsScanning AgentsOffensive AgentsStill need help? Ask the team