Scanning
Configuring scans, scheduling, scopes, authenticated scans, and exclusions.
Schedule scans without overwhelming the team
Pick a cadence that matches your change rate, not your anxiety level.
Updated · scheduling · cadenceDefine scan scope and targets
Why scope matters as much as what you scan, and how to think about “in-scope.”
Updated · scope · configurationAuthenticated vs unauthenticated scans
When to go to the trouble of authenticated scans and when the view from outside is enough.
Updated · authenticated · webappExclusions: cutting noise without creating gaps
How to exclude noisy assets safely, and what to document so the exclusions survive audit.
Updated · exclusions · noiseRead a scan report without drowning
A triage flow that handles a hundred new findings per week without burning out the team.
Updated · triage · reports