Creating Web Application Scan
Overview
DeepTraQ enables organizations to perform web application vulnerability assessments to identify security risks in public-facing applications and APIs. The platform provides automated scanning capabilities to detect common vulnerabilities such as SQL injection, cross-site scripting (XSS), and security misconfigurations.
With flexible scan configuration and intelligent reporting, users can easily create and run scans tailored to their application architecture and security requirements. DeepTraQ helps security teams continuously monitor and protect web applications without impacting production environments.
This documentation explains how to configure and launch a web application vulnerability scan using the DeepTraQ dashboard.
Supported Targets
Web application scans can be performed on:
- Public web applications
- APIs (REST/HTTP-based)
- Staging or test environments
- Internal applications (if accessible)
Example test target:
Prerequisites
- The target web application must be accessible from the scanning environment
- Ensure proper authorization before scanning production systems
- (Optional) Test targets or staging environments are recommended for safe testing
Scan Configuration
DeepTraQ allows users to configure scans with flexible parameters to match their testing requirements.
During scan configuration, users define:
- Target URL (web application or API endpoint)
- Scan name and description
- Tags for organization and tracking
- Scanner types and detection capabilities
- Advanced scan options
- Reporting and AI analysis settings
These parameters ensure accurate and controlled vulnerability assessment.
Target Configuration
Users provide the target application URL to begin scanning.
Example:
DeepTraQ uses this target to crawl the application and identify potential vulnerabilities across accessible endpoints.
Scanner Types
DeepTraQ supports multiple scanner types for web application testing.
Unauthenticated Scan
An unauthenticated scan analyzes publicly accessible areas of a web application without requiring login credentials.
This scan detects:
- OWASP Top 10 vulnerabilities
- SQL Injection
- Cross-Site Scripting (XSS)
- Security misconfigurations
This is ideal for identifying risks in external-facing applications.
Scan Parameters & Detection Settings
Users can configure detection settings based on application architecture and security requirements.
This includes:
- Scan depth and coverage
- Crawl behavior
- Request handling
- Detection sensitivity
These settings help balance scan accuracy and performance.
Advanced Options
Advanced configuration allows optimization of scan coverage and behavior.
This includes:
- Handling dynamic content
- Managing redirects and sessions
- Configuring safe scanning limits
- Avoiding disruption to production systems
AI Assistant Options
DeepTraQ provides optional AI-powered reporting to enhance scan results.
Users can enable AI features such as:
- Vulnerability summaries
- Executive-level insights
- Risk prioritization
These insights help translate technical findings into actionable outcomes.
Scheduling Options
Scans can be executed immediately or scheduled for automation.
Available execution modes include:
- Run scan immediately
- Schedule scan for a specific time
- Configure recurring scans
This enables continuous security monitoring.
Steps
- Navigate to Web Application Scans → Create Scan in the DeepTraQ dashboard
- Enter the scan name and description
- Provide the target URL (e.g., http://testasp.vulnweb.com)
- Add relevant tags for organization
- Configure scan parameters and detection settings
- Select the scanner type (e.g., Unauthenticated Scan)
- Configure advanced options if required
- Enable AI-powered reporting for insights
- Configure scan scheduling (run now or schedule)
- Review the complete scan configuration
- Click Create Scan to launch the scan
Field Reference
| Field | Description | Example |
|---|---|---|
| Target URL | The web application endpoint to scan | http://testasp.vulnweb.com |
| Scan Name | Unique identifier for the scan | Web App Security Scan |
| Description | Purpose of the scan | OWASP vulnerability test |
| Tags | Labels for organization | web, production |
| Scanner Type | Type of scan performed | Unauthenticated Scan |
| Scan Parameters | Controls scan behavior and depth | Full Crawl |
| AI Assistant | AI-based analysis and reporting | Enabled |
| Execution Mode | Immediate or scheduled scan | Run Now |
- Creating a Web Application Scan
- Understanding Web Scan Results
- Managing Web Vulnerabilities
- Configuring Scan Parameters