---
title: "Current scan policy"
method: GET
path: "/v1/scan-policy"
tags: ["Service"]
---

# Current scan policy

`GET /v1/scan-policy`

## Request

- Base URL: `https://api.ironfang.com/security`
- URL: `https://api.ironfang.com/security/v1/scan-policy`
- Auth: HTTP bearer

What the External Security Check includes and never does, and the statement the organisation confirms to authorise it.

## Response `200`

The current policy.

- ScanPolicy
  - `disclaimer` string, required
  - `excluded` PolicyItem[], required
    - `description` string, required
    - `id` string, required
    - `title` string, required
  - `included` PolicyItem[], required
    - `description` string, required
    - `id` string, required
    - `title` string, required
  - `scanner` ScannerIdentity, required
    - `info_url` string, uri, required
    - `source_addresses` string[], required: Public addresses scanner traffic comes from, for allowlisting.
    - `user_agent` string, required
  - `statement` string, required
  - `statement_version` string, required
  - `summary` string, required
  - `terms_url` string, uri, required
  - `title` string, required
  - `version` string, required

## Other responses

- `default`: An error.

---

[API](https://skmtc.dev/ironfang/apis/ironfang-security-api.md) · [All operations](https://skmtc.dev/ironfang/apis/ironfang-security-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ironfang/apis/ironfang-security-api/revisions/73bd66283d59?raw)