Introduction

The Scan Details page gives you a complete view of a single scan. You can check its status and next step, review and manage the vulnerabilities found, and track your security grade. To open it, click a scan on the DAST Scans page. The page title shows the scan type and start date, along with the target that was scanned.

Key Functions

• Summary cards: Three cards at the top show the number of Unsolved vulnerabilities, the number of Critical & High findings, and Loss Saved. For how loss values are estimated, see Understanding Bounty Loss & Potential Loss.

• Progress: Shows the scan status (for example, Scan Completed) and the Next step. For a completed scan, the next step is to fix the reported vulnerabilities and then request a re-scan. Click Timeline to see the scan's history.

• Vulnerabilities: Lists the findings with Severity, Vulnerability Name, Risk, Reporter and Created At. Findings are grouped by status:

• Details: Shows the scan ID, status, target, scan type, coverage, source, start date, last updated date and who created it.

• Security Grade: Shows your current grade and what you need to fix to reach the next one. Grades unlock in order, and each one lists the vulnerabilities to fix.

• Vulnerability Severity: A table of findings by severity (Critical, High, Medium, Low, Info) and by status (Open, Help, Review, Risk, Fixed), with totals.

Available Actions

• Search, filter and sort: Find vulnerabilities by keyword, filter the list, sort by Risk Score, or adjust the displayed columns.

• Open a vulnerability: Click a finding to see its details and remediation guidance.

• Mark fixes for review: After fixing a vulnerability, mark it as Ready for Review so it's included in a rescan.

• Rescan: Click Rescan to verify your fixes. Only vulnerabilities in Unsolved or Under Review status can be selected. Automated rescans start immediately, and you can run several at the same time. For the full process, see How-To: Rescanning Vulnerabilities.

• Request Vetting: Ask Astra's security engineers to manually review the scan's findings.

• Sitemap: View the URLs the scanner covered.

• Reports: Generate a report for the scan.

Best Practices

• Fix Critical & High findings first, since they improve your security grade fastest.

• Fix several vulnerabilities and mark each as Ready for Review before rescanning, so one rescan verifies as many fixes as possible.

• Check Sitemap to confirm the scanner reached the pages you expected. If key areas are missing, review your target's scope and login setup.

• Mark confirmed false positives so they're excluded from future scans and risk reports.

• Use Next step under Progress as your guide to what to do next.

Related Articles

• 📄 Overview of the DAST Scans Page

• 📄 How to: Request a Rescan After Fixing Vulnerabilities

• 📄 Overview: Understanding Bounty Loss & Potential Loss

• 📄 How to View False Positives for a Scan or Pentest

• 📄 Overview of Vulnerabilities Page