# Internal scans

> Test private applications from inside your network: the relay, its installation, the mandate that bounds the tests and the launch of an internal scan up to the automatic report.

An internal scan tests an application that only your network reaches. You declare a site (your private address ranges), install an agent on a machine of that site, it appears in **Sites and agents**, you grant a testing authorisation (the mandate: application, optional subdomains, HTTPS ports, end date), then you launch. The report arrives automatically, as for an external pentest.

> [!NOTE]
> Internal scans are enabled by SpectrAI on your space, after agreement on the scope and the relay deployment. Until then, the "Internal application" choice stays unavailable when creating a target: write to us from the [contact page](https://spectr-ai.eu/en/contact?request=internal).

> [!IMPORTANT]
> The relay must stay available for the whole duration of the test. After a relay loss, partial results are kept and the resume is explicit.

---

https://docs.spectr-ai.eu/en/scans-internes