Configuration

What IP addresses are used for the HostedScan vulnerability scanners?

HostedScan scanners run from the IP addresses behind scanners.hostedscan.com. Look them up with DNS or a public JSON endpoint, and allow them in your firewall.

What is Quality of Detection (QoD) in OpenVAS scans?

What the OpenVAS Quality of Detection (QoD) setting filters out, why 70% is a common default, and how to change it on the Scanners settings page.

I'm not seeing expected open ports and vulnerabilities?

When a scan misses open ports or vulnerabilities, a firewall is most often blocking the scan. Allow traffic from the HostedScan scanners in your firewall.

Exclude subdomains and customize the OWASP ZAP crawler

ZAP scans every subdomain that its crawler finds. Edit the crawler settings of a target to choose which domains, subdomains, and URLs to scan.

Scanning your Open API and Swagger endpoints

Scan your API with OWASP ZAP by uploading your OpenAPI or Swagger file, so the scanner finds the endpoints your API exposes and tests them for SQL injection.

Can HostedScan integrate with my ticketing system?

Connect HostedScan to your ticketing system with the Jira integration, scan emails sent to a system address, or webhooks on Premium and higher plans.

How do I white label the HostedScan report?

Put your company name, logo, and brand color on HostedScan PDF reports. On the Professional plan or the MSP program, the HostedScan name and logo are removed.

What CVSS Version Does HostedScan Use?

HostedScan uses CVSS v3 scores. An older vulnerability that has not been assigned a v3 score shows its CVSS v2 score instead.

Customize Request Headers or Cookies (OWASP Zap)

You can set Authorization, Bearer Token, API Key Headers and more for the OWASP Zap scanner, or set custom cookies to get past banners and authentication

How can I fix an unreachable target?

A target is unreachable when HostedScan cannot connect to it. Fix a typo in the target, a site that is down, or a firewall or WAF that blocks the scanners.

Long running scans (are normal)

Nmap, OWASP ZAP, and OpenVAS scans can run for hours, up to a full day, because of firewalls, large sites, or many services. SSLyze scans take minutes.

MSP Workspaces Explained

Workspaces give each client, office, or region its own targets, users, reports, and API keys. They come with the Professional plan and the MSP program.

How do I add anti-csrf tokens to the ZAP web application scanner?

See the anti-CSRF token fields that the ZAP web application scanner detects by default, and add your application's own token names to the target you scan.

Why did a scan return a cached result?

A free trial account may get a cached result from an earlier scan, which prevents abuse of the free trial. Paid accounts always get a new, full scan result.