Skip to main content

Running Your First Scan

This article explains how to run a security scan on a domain in seeshare, what to expect during the process, and how to read your results. It covers starting a scan from the dashboard, the scan status stages, typical scan durations by tier, and how to interpret and download your findings report.

Beginner

Running Your First Scan

A scan runs the security tools included in your domain's tier against your website, identifying vulnerabilities, misconfigurations, and compliance issues.

How to Start a Scan

  1. Go to Domains and click on the domain you want to scan
  2. On the domain detail page, click Scan Now
  3. The scan begins immediately and will appear in the Active Scans section of your Dashboard

What Happens During a Scan

The scan moves through several status stages: Pending (queued and waiting to start), Queued (picked up by the scanning engine), Scanning (tools are actively testing your site), Generating Report (scan complete, building results), Completed (results are ready to review), and Failed (something went wrong — check the error details).

Monitoring Progress

The Dashboard shows active scans with real-time progress updates. The Scans tab on the domain detail page lists all scans with their current status. You'll also receive an email notification when the scan completes, if enabled in your notification settings.

How Long Does a Scan Take?

Scan duration depends on your tier and the size of your site. Essential tier scans typically take 5–15 minutes (passive scanning only). Professional tier scans typically take 15–45 minutes, as they include active testing, network scanning, and deeper crawling. Large or complex sites may take longer.

Reading Your Results

Once the scan completes, click into the domain and open the Findings tab. Vulnerabilities are listed by severity: Critical (CVSS 9.0–10.0, fix immediately), High (CVSS 7.0–8.9, fix as soon as possible), Medium (CVSS 4.0–6.9, plan to fix soon), Low (CVSS 0.1–3.9, fix when convenient), and Info (CVSS 0.0, informational only). Each finding includes a plain-language description, the affected URL or endpoint, CVSS score and severity, remediation guidance, business impact analysis, and OWASP Top 10 mapping where applicable.

Downloading the Report

Go to the domain detail page and open the Reports tab. Click Download to get a PDF report. Reports are written in plain language and are suitable for sharing with non-technical stakeholders.

Next Steps

From here you can dive deeper into understanding your findings, set up scheduled scans to automate ongoing monitoring, or use the AI Assistant for help with remediation.