Before the first scan of an asset
- The asset must be verified.
- You sign the Authorized Security Testing record: you confirm that you own or are authorized to test the target, understand the scope and accept responsibility. It is stored with your IP address, browser and timestamp. A new record is needed when the agreement version changes; the portal tells you when.
Launch
- Open Scans → New scan, choose the asset and a profile.
- Start the scan. Follow progress live on the scan page, or leave and come back; a notification tells you when it finishes.
- To stop early, use Cancel.
Limits you may meet
- There is a cooldown of 10 minutes per asset, and an organization can start at most 30 scans per hour.
- Your plan limits how many scans run at once and how many you can run.
- If a launch is refused, the portal shows the reason and what to do. See Why a scan was refused.