How to exclude false positive assets?

In rare cases, a domain name, subdomain, IP address, or service scanned by the External Scan may not be part of your infrastructure. In this case, you can exclude.

circle-info

Note that not directly managing a domain name or IP address linked to your infrastructure does not mean that it should be removed from the scan. If a vulnerability is detected on these services managed by a third-party provider, it can still impact your IT system. You must therefore contact them to resolve it.

Remove a domain name or IP address

From the External Surface > Settings page, you can directly access and remove scanned domain names and IP addresses.

Exclude an asset

From the External Surface > Assets page, you can click on the relevant resource:

Select the reason for the exclusion, then click Exclude. We will analyze your request within 48 business hours. Once approved, it will be removed from the results during the next scan.

Last updated

Was this helpful?