Internal scans
Test private applications from inside your network: the relay, its installation, the mandate that bounds the tests and the launch of an internal scan up to the automatic report.
An internal scan tests an application that only your network reaches. You declare a site (your private address ranges), install an agent on a machine of that site, it appears in Sites and agents, you grant a testing authorisation (the mandate: application, optional subdomains, HTTPS ports, end date), then you launch. The report arrives automatically, as for an external pentest.
In this section
- 01The relayHow the internal scan relay works: an agent installed on your side, a signed image, a mandate enforced at the network level and destinations outside the mandate never tested.
- 02Install the relayDeclare a site, install the Docker agent on a machine of the network with the commands the application provides, see it appear ready, check reachability and keep it available during tests.
- 03The testing mandateDefine the testing authorisation of an internal site: the application, subdomains, HTTPS ports and duration. How the mandate is enforced, what it does not allow, how to change or revoke it.
- 04Launch an internal scanCreate an internal application attached to a site whose agent is ready and whose mandate is current, prepare and launch the pentest, follow the scan, handle a relay disconnection and receive the report.