Running a scan

The 'New scan' screen is where security testing starts. You choose what to test — source code, dependencies, a website, an API, a mobile app or cloud configuration — provide the target, and SecNxt does the rest.

Each scan type maps to a dedicated engine tuned for that surface, so you get depth rather than a shallow one-size-fits-all check.

When you launch a scan, SecNxt creates a scan record scoped to the current workspace and the asset you choose.

The matching engine runs (in the cloud, or on your self-hosted runner for private targets), streams progress, and writes findings back as it goes.

Findings are de-duplicated, assigned a severity and verification tier, and passed through the AI Threat Predictor for prioritisation.

1. 1Open 'New scan' from the sidebar.
2. 2Pick the scan type that matches your target (e.g. Website URL Scan for a live web app).
3. 3Select or create the asset the scan belongs to.
4. 4Enter the target details (repository, URL, package manifest, etc.).
5. 5Start the scan and watch live progress; results appear under Vulnerabilities and on the dashboard.

• First-time baseline of a new application or client environment.
• Re-testing after a fix to confirm an issue is resolved.
• Pre-release security gate before shipping.

• For private or internal targets, enrol a self-hosted runner so code and traffic never leave your network.
• Group related targets under one asset so findings and history stay together.

How long does a scan take?

Most scans finish in minutes, though large codebases, deep web crawls or full VAPT engagements take longer.

Can I schedule scans to run automatically?

Yes — continuous re-assessment lets you run scans on a recurring schedule and track posture over time.