Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions cloud/scanning/external-scan.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@
- Create compliance-focused scans
- Security baseline validation
- Custom compliance requirements
- Misconfigurations detection

Check warning on line 33 in cloud/scanning/external-scan.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

cloud/scanning/external-scan.mdx#L33

Did you really mean 'Misconfigurations'?
</Card>
</CardGroup>

Expand All @@ -44,13 +44,13 @@
<Card title="Custom Configuration" icon="sliders">
Add custom headers and variables for specialized scanning requirements.
</Card>
<Card title="Rate Limiting" icon="gauge-high" color="purple">
Enterprise: Configure custom scan rates to match your infrastructure capacity.
<Card title="Rate Limiting" icon="gauge-high" color="purple" href="/cloud/scanning/parameters#rate-limiting">
Enterprise: Configure custom scan rates to match your infrastructure capacity. Set the rate high enough for your template set to finish.
</Card>
</CardGroup>

<Note>
ProjectDiscovery offers Enterprise users gain additional features like custom scan limits, custom rate limits, and fixed scan IPs for whitelisting. Free users are limited to internal vulnerability scans only - learn more about internal scanning [here](/cloud/scanning/nuclei-scan).
Enterprise users gain additional features like custom scan limits, custom rate limits, and fixed scan IPs for whitelisting. Free users are limited to internal vulnerability scans only - learn more about internal scanning [here](/cloud/scanning/internal-scan).

Check warning on line 53 in cloud/scanning/external-scan.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

cloud/scanning/external-scan.mdx#L53

Did you really mean 'IPs'?
</Note>

## Get Started with External Scanning
Expand Down Expand Up @@ -117,5 +117,5 @@
## Next Steps

- [Configure Asset Discovery](/cloud/assets/adding-assets)
- [Create Custom Templates](/cloud/editor/introduction)
- [Create Custom Templates](/cloud/editor/overview)
- [View Integration Options](/cloud/integrations)
24 changes: 13 additions & 11 deletions cloud/scanning/parameters.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -25,14 +25,16 @@

**Rate limit per host**
Set the number of requests per second per host to control scan speed:
- Enter a number (e.g., `60` for 60 requests per second)
- Enter a number (e.g., `100` for 100 requests per second)
- Leave empty for maximum speed (default behavior)
- Lower values are more respectful to target hosts
- Higher values increase scan speed but may overwhelm targets
- Use `100` or higher for scans across the full template set
- Lower values suit small template selections and hosts that need protecting

<Note>
Lower rate limit values reduce scan speed but are more respectful to target hosts. Leave empty for maximum speed (default behavior).
</Note>
<Warning>
Scans run under a per-host time budget. If the rate limit is too low for the number of templates selected, not every template runs, and the exploitation templates that may find Critical and High issues can be dropped.

For a host that cannot take `100` requests/second, narrow the template selection to match. The [Recommended profile](/cloud/editor/recommended) excludes informational templates.
</Warning>

### Custom Headers

Expand Down Expand Up @@ -66,16 +68,16 @@
- Custom parameters
- Environment-specific values

### Interactsh Settings

Check warning on line 71 in cloud/scanning/parameters.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

cloud/scanning/parameters.mdx#L71

Did you really mean 'Interactsh'?

Configure out-of-band (OOB) testing parameters for advanced vulnerability detection:

**Server**
- Enter your custom Interactsh server URL (e.g., `oast.acme`)

Check warning on line 76 in cloud/scanning/parameters.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

cloud/scanning/parameters.mdx#L76

Did you really mean 'Interactsh'?
- Leave empty to use the default ProjectDiscovery server

**Token**
- Enter your Interactsh token for authentication

Check warning on line 80 in cloud/scanning/parameters.mdx

View check run for this annotation

Mintlify / Mintlify Validation (projectdiscovery) - vale-spellcheck

cloud/scanning/parameters.mdx#L80

Did you really mean 'Interactsh'?
- Required if using a custom server
- Example format: `1234-5678-9012-3456`

Expand Down Expand Up @@ -158,7 +160,7 @@
- **Global Application:** The configuration applies to every scan automatically
- **Manual Selection:** You choose when to apply the configuration per scan

**Recommendation:** Use global application for rate limiting configurations to ensure consistent, respectful scanning behavior across all your scans.
**Recommendation:** Global application keeps scanning behavior consistent. Note that a rate limit set for one sensitive host then applies to every scan, including full template-set scans. See [Rate Limiting](#rate-limiting).

## Advanced Configuration Examples

Expand All @@ -184,7 +186,7 @@
- **Custom Headers:**
- `X-Forwarded-For: 192.168.1.100`
- `User-Agent: Corporate Security Scanner`
- **Rate limit per host:** `10`
- **Rate limit per host:** `100`

## Best Practices

Expand All @@ -200,9 +202,9 @@
- Limit configuration access to authorized users

3. **Rate Limiting Guidelines**
- Start with lower values (10-30 requests/second)
- Increase gradually based on target capacity
- Use global rate limiting for consistent behavior
- Use 100+ requests/second for full template-set scans
- Reserve 10-30 requests/second for small template selections
- Narrow the template selection alongside the rate limit
- Monitor target server response times

4. **Template Variables**
Expand Down
Loading