Skip to content
TasScan
Free scan

Findings and score

What a clean result does and does not mean

Automated scanning is useful, but it is not a penetration test or a certification.

  • A scan with no findings means that the checks that ran found nothing. It does not prove the site is free of vulnerabilities.
  • Checks that timed out, were blocked, skipped, unsupported or failed to sign in are shown as inconclusive, never as passed. Reports list the modules that really ran and the limits applied.
  • An automated scan is not a penetration test and is not a certification or a compliance attestation. It supports manual testing; it does not replace it. See Supporting penetration testing.
  • Only the HTML and responses a scan can fetch are analyzed. Anything that appears only in a visitor's browser, or only after a login the scan could not complete, is not seen.