Skip to content
TasScan
Free scan

Scanning

What our scans do and never do

The limits, the request types, the identifiable User-Agent and the source addresses to allow-list.

TasScan scans are built to be non-destructive and to stay polite to the target.

Limits per scan job

  • At most 5 requests per second, 4 connections, 2,000 requests and 30 minutes.
  • Only GET, HEAD and OPTIONS requests are used.
  • Scans identify themselves with a recognizable User-Agent that links to our security page.

Allow-listing us

If a firewall or WAF might block the scanner, allow-list its User-Agent and source addresses. The addresses are listed on the security page when the operator has published them, and in every report. When none are listed they are provided on request by TAS Group LLC; we never show invented addresses.

More detail

The full list of what the checks do is on the security page. If you see traffic you think is abusing the scanner, tell us at once. See Report a vulnerability or abuse.