Your First Scan Walkthrough

Before You Begin

Make sure you have:

• An active APVISO account (free tier works fine).
• A domain or IP address you own and can verify.
• Access to your DNS settings, web server, or site HTML for verification.

Step 1 — Add the Target

Go to Targets → Add Target and enter your domain (e.g., staging.example.com). APVISO checks that the target resolves and is not an internal address.

Step 2 — Verify Ownership

Select a verification method. For most users, the DNS TXT method is simplest:

1. Copy the TXT value shown in the dashboard.
2. Add it as a DNS TXT record on your domain.
3. Click Verify. DNS propagation usually takes a few minutes.

Once verified, a green badge appears next to the target.

Step 3 — Configure and Start

Click Start Scan on the target detail page. Choose your model preset:

• free — quick, lightweight assessment at no credit cost.
• low / medium / high / ultra — progressively deeper analysis with higher credit consumption.

Optionally configure authenticated scanning if your target requires login. Click Confirm to enqueue the scan.

Step 4 — Watch the Scan Live

The scan moves through several statuses: queued → provisioning → running → completed. During the running phase you will see a live feed of agent messages:

• The recon agent reports discovered subdomains, open ports, and technologies.
• The scanner agent logs each test it performs and any vulnerabilities it confirms.
• The lead agent occasionally posts strategy updates.

Findings appear in the Findings panel as they are confirmed.

Step 5 — Review Findings

Each finding includes:

• Severity — Critical, High, Medium, Low, or Informational.
• Description — what the vulnerability is and why it matters.
• Evidence — HTTP request/response pairs, screenshots, or proof-of-concept payloads.
• Remediation — concrete steps to fix the issue.
• CWE / CVE — standard references for further research.

Step 6 — Download the Report

When the scan finishes, a Markdown report is generated automatically. Navigate to Reports to view it or download a formatted PDF.

Step 7 — Retest After Fixing

After you remediate findings, select the ones you have fixed and click Retest. APVISO will run a targeted retest to verify the fixes and update finding statuses accordingly.