> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kikimora.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Adding assets by domain

> Discover attack-surface assets by querying the DNS records and SSL certificates behind a root domain, then save the candidates you want to monitor.

Adding an asset by domain runs a discovery lookup: Kikimora queries the DNS records and, optionally, the SSL certificates associated with a root domain, then lets you choose which of the discovered hostnames and IPs to monitor.

## How discovery behaves

* **Domain normalization** — paste a full URL such as `https://sub.example.com/test` and the field strips the protocol, subdomain, and path on blur, leaving the bare registrable domain `example.com`.
* **Candidate discovery** — the lookup queries DNS records and returns candidate hostname and IP rows.
* **SSL certificate toggle** — enabling **Also search SSL certificates** pulls in additional certificate-derived matches, deduplicated against the DNS results.
* **Candidate selection** — filter candidates by search term, toggle them individually or in bulk, and save your selection to the inventory.
* **Admin-only fields** — if **Tenant** and **Risk Owner** appear in the Add Asset dialog, they are restricted to tenant-admin roles.

## Add assets by domain

1. Click **Add New** at the top right of the Exposure table to open the **Add Asset** dialog.
2. Type or paste the target domain or URL into the **Domain / IP** field and click **Search**. The value is normalized to the bare domain and the DNS candidates load below.
3. Review the candidate table of discovered hostnames and IP addresses. Select the rows you want using the checkboxes, or select all from the header checkbox. The dialog footer tracks how many are selected.
4. Click **Save** to add the selected candidates to your monitored inventory.