Step by step
The narration of the video as text. Select a time to play the video from that step.
In this video, you will run a vulnerability scan on one of your verified targets, watch it live, and find its results.
Open Infrastructure Security, then Vulnerability Scanner. Scan History lists every scan, with its target, type, findings and status.
Click Scan Vulnerability to open the Scanner Console.
On the left are the scan engines, in three groups. Reconnaissance maps your attack surface. Vulnerability Scans test web applications, open ports and SSL. Platform Scanners check WordPress, cloud and Kubernetes targets.
Tick Web application scan. Its options appear below: light or deep scan, redirects, speed, and an authenticated scan for pages behind a login.
On the right, choose the targets to scan. Here we pick app dot northwind dot example dot com.
The footer shows how many targets and engines are selected, and the estimated time. Click Launch Scan.
The scan has started. You can close the console at any time: the scan keeps running on our side.
In Scan History, the new run shows as Running. Click its status, then Open in console, to watch it live.
The security terminal streams what the engine is doing: crawling pages, fingerprinting the server and testing inputs. From here you can also stop or delete the scan.
A real scan takes from a few minutes to about half an hour. When it finishes, you get a notification, and the row shows Completed with the number of findings.
Click the findings of a completed scan to see exactly what it found. Next video: how to review a finding and fix it.
