Help Centre
Scanning
Profiles, authorization, authenticated scans, schedules and what our scans do.
What the free security check does
The anonymous check on the website is limited and read-only. Exactly what it sends, its limits and how to opt your domain out.
Scan profiles: Quick, Standard, Deep and Custom
What each profile is for and which plan includes it.
Run a scan
Authorize the asset, pick a profile, launch, follow progress and cancel if needed.
Why a scan was refused
The checks that run before a scan starts and what to do about each refusal.
What our scans do and never do
The limits, the request types, the identifiable User-Agent and the source addresses to allow-list.
Authenticated scans
Scan the parts of a website or API that only appear after sign-in, using a dedicated test account.
API assessment: what is and is not tested
How to give TasScan your API scope and exactly what a Deep scan does with it.
Scheduled scans
Run scans automatically every day, week or month, and what makes a schedule pause.