Run a scan

Scan again after a fix

A later scan updates a finding that is still present. It does not file that issue a second time.

1. 01

   Fix the application, then click Run scan

   The worker repeats capture and replay. Production asks for the extra confirmation each time.

2. 02

   Match the old row

   A finding is identified by the target, the method, the path, the category, and the identity. If it is still present, the existing row keeps its place and picks up the new status and the new redacted evidence.

3. 03

   Read what changed

   After two completed scans, the target page lists what appeared and what disappeared. Use the latest completed scan as the baseline when that run is the result you want to keep.

First scan    GET /api/users · unguarded_access · Anonymous · OPEN
Second scan   same route, same category, same identity
Stored as     one row, evidence replaced, still open