Security Center

What does the different scan statuses mean?

A network or web application scan can result in one of the following scan statuses. 

  • Stopped
    The scan is not running and is currently being stopped. A manual action from a user in the account typically triggers this. 
  • Paused
    The scan has been paused. This can be a manually triggered action by a user or when the vulnerability feed is being applied on the scan node. Note: Network scans can only be paused for up to 2 hours.
  • Requested
    The scan is about to start and is currently queued.
  • Running
    The scan is being executed and is currently in progress. If you believe your scan is not progressing, you can find more information here:
    https://support.holmsecurity.com/knowledge/why-is-my-scan-not-progressing
  • Finished
    It's been completed without any errors.
  • Finished with warning
    The scan was completed but with some additional information, such as the inability to find any alive hosts during the scan. Read more about the warning status here:
    https://support.holmsecurity.com/knowledge/why-did-a-network-scan-not-find-any-hosts-alive/active
  • Error
    The scan needed to be completed successfully. Instead, it ran into a severe issue that impacted its ability to execute and collect the scan result. Read more about the error status:
    https://support.holmsecurity.com/knowledge/why-did-my-external-scan-end-up-in-an-error
  • Throttling
    When a requested scan is too long in the Throttling state and exceeds a limit, the status changes to Error: Scan couldn't be started due to the license limit.