Create Custom Scan Profile

Identifier of the custom scan profile.
It must start with "sp-".

Name of the scan profile.
The maximum length is 255 characters.

Description of the scan profile.

If true, the scan profile is no longer in use.
If false, the scan profile can be used.

Target type:

• web - Scan a Web application, including Single Page Applications (SPA) that rely on one or more APIs.
• api - Scan a standalone API defined by an OpenAPI schema, or by a Postman Collection.

Scan speed:
(Defaults to 20)

• 10 - Slow - Does roughly half the number of parallel requests of the Normal speed.
• 20 - Normal - Offers a good balance between scan duration and the number of requests performed at the same time to the target.
• 30 - Fast - Does roughly twice the number of parallel requests of the Normal speed.

Scan payloads:
(Defaults to 20)

• 10 - Light - Uses slightly less payloads than Normal, reducing scan time while still detecting the most common situations.
• 20 - Normal - Uses a set of payloads that maximizes detection without increasing the scan time excessively, delivering a good compromise.
• 30 - Thorough - Includes a more extensive set of payloads to detect very uncommon situations. Scan time increases significantly.

Scan methods:
(Defaults to all)

• all - All methods - Allow any HTTP method to be used during the scan.
• safe - Only safe methods - Ideal set for production targets, allowing only the following HTTP methods: GET, HEAD, OPTIONS, TRACE, and CONNECT.

If true, the scan profile allows targets with unverified domains.

Time delay in milliseconds between requests for each scanning thread.
It is an approximate value and is more accurate for slower scan speed settings.
If not defined, there is no delay between requests.
The maximum delay is 5000ms.

If true, the scan deduplicates pages with the same SimHash to scan only a few of them.
If false, the scan does not deduplicate pages, which can increase the scan duration significantly.
Defaults to true.

If true, the scan detects URL patterns to identify similar pages to scan only a few of them.
If false, the scan does not detect patterns, which can increase the scan duration significantly. Defaults to true.

Maximum number of URLs the crawler can visit.
The value must be between 1 and 50000.
Defaults to 5000, which is a good compromise between coverage and scan time.

If true, it is a built-in scan profile, which cannot be changed.
If false, it is a custom scan profile and the id must start with "sp-".

Identifier of the scan profile.
Custom scan profiles are always prefixed by "sp-".

Name of the scan profile.
The maximum length is 255 characters.

Description of the scan profile.

If true, the scan profile is no longer in use.
If false, the scan profile can be used.

Target type:

• web - Scan a Web application, including Single Page Applications (SPA) that rely on one or more APIs.
• api - Scan a standalone API defined by an OpenAPI schema, or by a Postman Collection.

Scan speed:
(Defaults to 20)

• 10 - Slow - Does roughly half the number of parallel requests of the Normal speed.
• 20 - Normal - Offers a good balance between scan duration and the number of requests performed at the same time to the target.
• 30 - Fast - Does roughly twice the number of parallel requests of the Normal speed.

Scan payloads:
(Defaults to 20)

• 10 - Light - Uses slightly less payloads than Normal, reducing scan time while still detecting the most common situations.
• 20 - Normal - Uses a set of payloads that maximizes detection without increasing the scan time excessively, delivering a good compromise.
• 30 - Thorough - Includes a more extensive set of payloads to detect very uncommon situations. Scan time increases significantly.

Scan methods:
(Defaults to all)

• all - All methods - Allow any HTTP method to be used during the scan.
• safe - Only safe methods - Ideal set for production targets, allowing only the following HTTP methods: GET, HEAD, OPTIONS, TRACE, and CONNECT.

If true, the scan profile allows targets with unverified domains.

Time delay in milliseconds between requests for each scanning thread.
It is an approximate value and is more accurate for slower scan speed settings.
If not defined, there is no delay between requests.
The maximum delay is 5000ms.

If true, the scan deduplicates pages with the same SimHash to scan only a few of them.
If false, the scan does not deduplicate pages, which can increase the scan duration significantly.
Defaults to true.

If true, the scan detects URL patterns to identify similar pages to scan only a few of them.
If false, the scan does not detect patterns, which can increase the scan duration significantly. Defaults to true.

Maximum number of URLs the crawler can visit.
The value must be between 1 and 50000.
Defaults to 5000, which is a good compromise between coverage and scan time.

If true, it is a built-in scan profile, which cannot be changed.
If false, it is a custom scan profile and the id must start with "sp-".