← Back to Scanning FAQ

Yes. If you want more control over how a scan is executed, you can use Expert Mode before launching a single scan.

With Expert Mode, you can adjust the full HTTP request that will be sent to your asset. This includes:

• HTTP Version: Choose between HTTP/1.1 and HTTP/2

• Request Method: GET, POST, PUT, etc.

• Target URL: Customize the full URL you want to test

• Headers: Add or modify headers like User-Agent, Authorization, Accept, and more

• Request Body: Define the body of the request for POST or PUT methods

To access Expert Mode:

• Go to a scan tool.

• Select or create a request.

• Click the “Use Expert Mode” button next to the request.

• Once you're done configuring, click Start Scan to run your fully customized test.

Expert Mode is designed for scenarios where precise control over the HTTP layer is needed — such as testing APIs or authenticated endpoints.

Note that this feature is currently supported only for URL-based assets and HTTP-request-based scans.