Scans and runs
A scan checks the targets you authorise, on demand or on a schedule, and Tasks › Runs lists each time it ran.
Add a scan
| Scan type | What it does |
|---|---|
| Attack Surface | Maps what your domains expose to the internet. Outside Custom Configuration, tick either review below under Configuration reviews to run it over what the scan finds. |
| Dark Web Discovery | Looks for leaked credentials tied to your domains, in breach data and on the dark web. |
| TLS & cipher configuration | Reviews which TLS versions and cipher suites a service accepts, and its certificate. |
| HTTP security headers | Checks the security headers your web services send. |
- Open Tasks › Scans and select New Scan.
- Enter a Scan Name, then choose a Scan Type and a Run Mode: On Demand or Scheduled. To switch run mode later, delete the scan and create it again.
- For an Attack Surface scan, Scan Preset Type sets how far it goes: Passive Scanning, Active Scanning, Deep Scanning or Custom Configuration. A preset outside your plan shows a lock.
- Add the targets. Dark Web Discovery takes Monitored Domains and, optionally, Monitored Emails.
- Tick the box confirming your organisation is authorised to scan the targets, then select Create Scan.
If asked to prove you control a target, select Go to Domains and follow Verify another target.
Run a scan
Open the scan's row menu in Tasks › Scans, choose Trigger Scan, then Yes, Trigger. An Attack Surface scan opens Live Scan; a Dark Web Discovery scan opens Dark web › Exposures.
When a scan is blocked, Trigger Scan is greyed out with the reason beneath it, and the next item opens the fix.
Repeat a scan on a schedule
- Select New Scan and set Run Mode to Scheduled.
- In Schedule, choose Daily, Weekly or Monthly; the platform picks the run time. Custom (advanced) takes a cron expression.
- Select Create Scan. For the next run time, turn on the Next Run column from View.
Paid plans include scheduled scans, and the frequencies depend on your plan; see pricing.
| To | Row menu |
|---|---|
| Pause or resume a scheduled scan | Pause scan, Resume scan |
| Change the name, targets or schedule | Edit, then Save Changes |
| Remove the scan | Delete |
Watch a scan live
Live Scan shows an Attack Surface scan's progress as it runs. Paid plans include a discovery graph and the names of what it finds; see pricing. Both also need a verified domain.
Review the results
Open Tasks › Runs and expand a scan to see its runs, or choose View Result from the scan's row menu in Tasks › Scans. Paid plans include the detail of what each run found; see pricing. It also needs a verified domain.
Data and access
| Scans | |
|---|---|
| Reads | Your authorised targets, what they expose to the internet and, for Dark Web Discovery, breach data naming them |
| Shows it in | Tasks › Runs, Assets, Exposure › Findings, Dark web › Exposures |
| Held and removed under | Privacy Policy · Security |
Did this answer your question?
Actions
An action is a piece of remediation work, such as a fix for a control, requirement, risk, finding or vulnerability, or work you add yourself.
Assets
Assets is your inventory of networks, identities, applications, devices and data, with the domains you prove you control and a graph of how they connect.