Can I customize scan configuration before starting?
Yes. If you want more control over how a scan is executed, you can use Expert Mode before launching a single scan.
With Expert Mode, you can adjust the full HTTP request that will be sent to your asset. This includes:
- HTTP Version: Choose between HTTP/1.1 and HTTP/2
- Request Method: GET, POST, PUT, etc.
- Target URL: Customize the full URL you want to test
- Headers: Add or modify headers like User-Agent, Authorization, Accept, and more
-
Request Body: Define the body of the request for POST or PUT methods
To access Expert Mode:
- Go to a scan tool.
- Select or create a request.
- Click the “Use Expert Mode” button next to the request.
-
Once you're done configuring, click Start Scan to run your fully customized test.
Expert Mode is designed for scenarios where precise control over the HTTP layer is needed — such as testing APIs or authenticated endpoints.
Note that this feature is currently supported only for URL-based assets and HTTP-request-based scans.