Excluding false positive assets

In rare cases, a domain name, subdomain, IP address, or service scanned by the External Scan may not be part of your infrastructure. In this case, you can exclude it.

Note that not directly managing a domain name or IP address linked to your infrastructure does not mean that it should be removed from the scan. If a vulnerability is detected on these services managed by a third-party provider, it can still impact your IT system. You must therefore contact them to resolve it.

Remove a domain name or IP address

From the External Scan > Settings page, you can directly access and remove scanned domain names and IP addresses.

Exclude an asset

From the External Scan > Assets page, you can click on the relevant resource:

Select the reason for the exclusion, then click Exclude. We will analyze your request within 48 business hours. Once approved, it will be removed from the results during the next scan.

If a scan is currently in progress, the Exclude button will be disabled. You will need to wait for the scan to complete before you can submit an exclusion request.