Skip to content
TasScan
Free scan

Getting started

Your first scan in five steps

From adding a domain to reading your first results.

TasScan only scans targets you can prove you own or are authorized to test. The first run therefore has a few set-up steps.

  1. Add an asset. Go to Assets → Add asset and enter a domain, website, web application or API endpoint. Private, loopback and cloud-metadata addresses are not accepted.
  2. Verify ownership. Choose DNS TXT, an HTTP file, a meta tag or an email code. Nothing is scanned until this step succeeds. See Why we ask you to verify.
  3. Sign the authorization record. Before the first scan of an asset you confirm that you are allowed to test it and accept responsibility for the scope. The record is stored with your IP address and a timestamp.
  4. Start the scan. Pick a profile (Quick is on every plan) and launch it. Progress is shown live and you can cancel at any time.
  5. Read the results. Findings are ranked by severity, with an explanation and a recommended fix. Your security score is calculated from the open findings.

Not ready to sign up?

The free security check on the scanner page runs a limited, read-only check against a public domain without an account. See What the free security check does.