- Knowledge base
- Getting started
- Web Application Scanning
-
Security updates
-
Product news
-
Next-Gen Vulnerability Management
-
Getting started
-
General
-
Operating status
-
Network & System Security
-
Web Application Security
-
Cloud Security
-
API Security
-
Phishing Simulation & Awareness Training
-
Attack Surface Management
-
Scanner Appliance
-
Device Agent
-
On-premise platform deployment
-
Asset management
-
Vulnerability manager
-
Reports
-
Digest reports
-
Organizer
-
Continuous monitoring
-
Integrations
-
Platform API
-
Remediation
-
Users
-
PCI DSS
-
Terms & conditions
-
Dashboard
How do I get started with scanning a web application?
To set up a web application scanning, go through these steps.
1. Install a Scanner Appliance
A Scanner Appliance is used for scanning within your local networks, behind your firewall. If you wish to scan publicly available web apps, you normally use our external/cloud scanners. If you're only scanning publicly available web apps, you can skip this step.
Install a Scanner Appliance for local scanning:
https://support.holmsecurity.com/knowledge/how-do-i-install-a-scanner-appliance-1
2. Create a web app asset
Create assets for each web app that you want to scan:
https://support.holmsecurity.com/knowledge/how-do-i-create-a-web-application
3. Create a scan profile
Create a web application scan profile with settings for how to scan the web app:
https://support.holmsecurity.com/knowledge/how-do-i-create-a-web-application-scan-profile
4. Schedule or run only once
Schedule a scan based on the profile, or run a scan once. You must do this for each web application you want to scan.
https://support.holmsecurity.com/knowledge/how-do-i-schedule-a-scan-for-an-web-app