Home
Configuration
You configure a scan by choosing settings that best describe your application, and the kind of testing you want.
Scan Configuration Wizards
You can quickly configure basic scans using the wizards.
Wizard: Web API scan
Lists the steps of this wizard.
API Type
Specifying the type of API (and adding the description file if relevant), can improve coverage by better configuring parameters, before you start your manual explore.

Configuration
You configure a scan by choosing settings that best describe your application, and the kind of testing you want.
- Scan Configuration Wizards
  You can quickly configure basic scans using the wizards.
  - Launching the Scan Configuration Wizard
  - Wizard: Scan web application
    Lists the steps of this wizard.
  - Wizard: Web API scan
    Lists the steps of this wizard.
    - Client
      Select your recording client type, and if needed configure proxy port and IP.
    - Connection Settings
      (Optional:) Configure proxy settings and server-level authentication if needed.
    - API Type
      Specifying the type of API (and adding the description file if relevant), can improve coverage by better configuring parameters, before you start your manual explore.
    - Login Management
      Record the login procedure.
    - Login Management Details
      (Optional:) Review and edit the login sequence you recorded.
    - Test Policy
      Limiting the scan to the specific types of tests you want can reduce scan time.
    - Test Optimization
      Test Optimization lets you take advantage of our ongoing statistical analysis for a faster scan.
    - Complete
      AppScan is now configured as a recording proxy for your device to send requests to the application. You are now ready to start your Manual Explore of the application.
  - Wizard: Incremental scan
    Lists the steps of this wizard.
- Scan Configuration Dialog Box
- Scan using a Postman Collection
  If you have a Postman Collection of requests to your web API, you can import it and use it as the basis for a scan.
- Scan file structure
  Explains the basic structure of an AppScan Standard SCAN file.
- Scan templates
  A scan template is simply a scan configuration that has been saved so that you can use it again.
- Changing the configuration during a scan

API Type

Specifying the type of API (and adding the description file if relevant), can improve coverage by better configuring parameters, before you start your manual explore.

Procedure

Select the relevant radio button:
- Open API: For Open API it is recommended to add a description file if possible:
  1. Select URL or File path, as needed.
  2. Enter the URL or file path in the field, and click Verify.
    AppScan checks that it can locate the file, and verifies that it is an OpenAPI file.
- GraphQL: AppScan will apply custom parameter definitions by using the GraphQL template for this scan.
- Other: Select this if your web API is neither Open API nor GraphQL.
Click Next.

API Type

Procedure

What to do next