Why is my scan not progressing? 

Displaying the progress of network or web app scans can sometimes be challenging because the scan engines work dynamically and may discover new assets along the way, leading to an unpredicted increase in scan time. However, as long as the scan shows a percentage, it means it is running.

Scans contain several phases; the first part below 10% is the discovery phase. This part can take a long period as assets, ports, and services are still being discovered. During this phase, it is common for the scan to show a progress of only 1% for a significant amount of time.

At the end of a scan, which is more common for web app scans, there are still targets (e.g., URLs) left to be evaluated for vulnerabilities, which can impact this phase depending on the response time of URLs and if more URLs are discovered. During this phase, it is common for the scan to show a progress of 99% or 100% for a significant amount of time.