← Back to Scanning FAQ

Scan categories group checks by the type of risk they target. They help you control what is included in Full Scan and Continuous Scan.

The available scan categories include:

• DNS Controls - DNS configuration and record checks

• SSL Controls - SSL/TLS certificate and configuration checks

• Misconfiguration - insecure or incorrect service and application settings

• Network Vulnerabilities - exposed services, weak protocols, and common network issues

• Web Vulnerabilities - common web application issues such as SQL injection, XSS, and insecure endpoints

• Information Scans - publicly exposed metadata, technologies, and related signals

• Product-Based Web Vulnerabilities - known issues in web technologies and CMS products

• Product-Based Network Vulnerabilities - known issues in infrastructure and network products

• Exposed Panels - admin panels, dashboards, and sensitive interfaces

When setting up a Full Scan, you can choose which categories to include. For Continuous Scan, you can manage enabled categories from Asset Manager -> Settings -> Continuous Security.