> For the complete documentation index, see [llms.txt](https://docs.stoik.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.stoik.io/broker/en/underwriting/external-scan-and-eligibility.md).

# External scan and eligibility

### What is the external scan?

The external scan is a tool developed by our teams to simplify the underwriting process. It audits the external surface of your client's information system in search of potential cyber vulnerabilities, much like a burglar checking from the street whether a house's front door is open or its alarm system is poorly configured.

Once launched, the external scan runs for anywhere between 20 minutes and a few hours. Our goal is to run the most accurate and complete audit possible, testing a wide range of vulnerabilities.

For standard studies, the external scan score determines your client's eligibility. You must therefore wait for the scan to finish before sending your project for signature. From the `Prospects` page, click the grey arrow to the right of Domain name: you can filter by status: `In progress`, `Eligible`, `Not eligible`.

### What happens once the scan is complete?

For a standard underwriting process, you will receive an email inviting you to continue with underwriting:

* If the score is above 60/100, your client is immediately eligible;
* If the score is below 60/100, your client can receive free support from one of our Stoïk Experts to improve their security posture and become eligible.

The external scan score is valid for 90 days. After this period, you will need to re-run the scan to reconfirm your client's eligibility.

{% hint style="info" %}
The external scan is also part of our prevention toolset: once your client is insured with Stoïk, it will run automatically every week from Stoïk Protect, looking for potential security gaps.
{% endhint %}

The risk report provides a summary of the external scan results and cyber recommendations to share with your client. It is automatically emailed to you once the scan is complete, and you can find it at any time in your Broker Space, under the `Documents` tab of the project page.

### What if my client is not eligible?

If critical vulnerabilities are detected on your client's information system, they are not eligible. The company can receive free support from one of our cyber experts to improve their security posture and become eligible.

Once your client has taken corrective action to improve their security posture, you can re-run the scan by clicking `More actions` from the prospect view, then `Re-run scan`.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.stoik.io/broker/en/underwriting/external-scan-and-eligibility.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.