Introduction

After a manual penetration test, you have a 30-day window to fix vulnerabilities and request a re-scan. If you need more time, you can request a deadline extension before the window closes. This guide explains how to do that and what to keep in mind.

Prerequisites

• An active manual pentest with reported vulnerabilities

• Re-scan window not yet expired

• Workspace Full Member role or higher

How the Re-Scan Window Works

• You have 30 days from the date vulnerabilities are reported to request a manual re-scan

• After 30 days, the re-scan request expires and may require an additional purchase depending on your plan

• This window applies to manual re-scans only — automated re-scans have no expiry and can be triggered at any time

How to Request an Extension

1. Raise a support ticket from your Astra dashboard before your re-scan window expires

2. Include the following in your message:

   • Your target name or ID

   • Your pentest or scan ID

   • A brief explanation of why you need more time

3. Our support team will review your request and extend the window if approved

Expected Outcome

Once approved, your re-scan deadline will be extended and updated in your dashboard. You will be able to request a re-scan as normal from the Pentest Details page within the new window.

Best Practices

• Request the extension early — do not wait until the final day of your window

• Only request a re-scan after fixes are implemented — requesting a re-scan before fixes are in place uses up one of your re-scan attempts without providing value

• Mark vulnerabilities as Under Review before submitting a re-scan request — only vulnerabilities marked this way are included in the re-scan

• Fix at least 50% of critical and high severity vulnerabilities before requesting a re-scan — this is a requirement for manual re-scans

Troubleshooting

Re-scan window already expired before requesting an extension

• Contact support immediately at help@getastra.com. While extensions after expiry are handled on a case-by-case basis, reaching out promptly improves your chances of a resolution.

• Depending on your plan, an additional purchase may be required to reopen the re-scan window.

Extension request denied

• Our team reviews each request individually. If denied, contact your account manager to discuss options including purchasing an additional re-scan.

Re-scan option is greyed out or unavailable

• Confirm that fewer than 50% of critical and high severity vulnerabilities are still unsolved — this is a prerequisite for manual re-scans.

• Ensure at least some vulnerabilities are marked as Under Review before attempting to request a re-scan.

Not sure when your re-scan window expires

• Open the relevant pentest from the Pentests page in your dashboard. The re-scan validity date is displayed in the re-scan panel when you click the Re-Scan button.

Next Steps

• How to Request a Rescan After Fixing Vulnerabilities

• How much time does it take for a re-scan

• Rescanning Vulnerabilities

• Overview of Vulnerabilities Page