Before a scan starts we check, in this order: your session and multi-factor policy, the organization's status, your permission, that the asset belongs to you, that it is not blocked, that it is verified, that you have signed the authorization, that the profile is included in your plan, your plan's scan quota, that the target resolves to public addresses, the per-asset cooldown, the organization's hourly limit, any abuse suspension and scanner capacity.
The same ownership, authorization and block checks run again right before the scan is handed to a scanner, so a scan queued before a suspension or an expired verification fails instead of running.
Common reasons and fixes
| What you see | What it means | What to do |
|---|---|---|
| Re-verification required | Verification expired or the token was no longer found | Publish the token again and press Check verification. |
| Target changed | The asset now resolves to new addresses and we are re-checking | Wait about a minute and try again. |
| Authorization needed | You have not signed the current authorization | Sign the record from the asset page. |
| Profile not in your plan | Standard or Deep need a higher plan | Upgrade or use Quick. |
| Quota used up | You reached your plan's scan allowance | Wait for the next period or upgrade. |
| Cooldown | The asset was scanned within the last 10 minutes | Try again shortly. |
| Rate limit | 30 scans started in the last hour | Try again later. |
| Asset paused | You are over the asset limit of your plan | Remove assets or upgrade. See Cancel, resume and the Free plan. |
| Asset blocked | TasScan has blocked the asset | Contact support. |
| Target not public | The address is private, loopback or a cloud-metadata address | Only public targets can be scanned. |
| Target not allowed | The address belongs to TasScan itself | These cannot be scanned. |