Why is my scan not progressing? 

Tracking the progress of network or web application scans can be difficult due to the dynamic nature of scan engines, which may identify new assets during the process. This can result in unexpected extensions of the scan duration. Nevertheless, a displayed percentage indicates that the scan is actively in progress.

Scans progress through several stages, the initial phase being the discovery phase, which occurs when the scan is below 10% complete. This phase can be time-consuming, as it involves identifying various assets, ports, and services. During this stage, it is not uncommon for the scan to indicate a progress of just 1% for an extended period.

At the end of a scan, which is more common for web app scans, there are still targets (e.g., URLs) left to be evaluated for vulnerabilities, which can impact this phase depending on the response time of URLs and if more URLs are discovered. During this phase, it is common for the scan to show a progress of 99% or 100% for a significant amount of time.