What is a Finding Rescan?

The Bitsight platform regularly checks for new observations. Findings are updated as these observations change, e.g., there are newly observed Diligence findings or an existing finding is remediated. This update is called a rescan, which can be automated or user-requested. Select risk vectors provide an instant response when a rescan is user-requested.

Learn more:

• Rescan by Risk Vector
• Rescan Statuses
• Requesting a Rescan
• Verifying that a Finding is Remediated

Automated Scan

This is a scheduled scan to automatically rescan findings.

User-Requested Rescan

A finding rescan requested by a user. This type of rescan is only available for supported Diligence risk vectors.

User-requested rescan timeline:

1. A rescan has a base duration (depending on the risk vector) to be completed.
2. We scan for data on the asset for 3 days. If we don't find anything, we continue scanning for an additional 3 days.
3. If we don't find anything at that point, the rescan status is Asset Not Found.

Instant Reply

The following risk vectors provide an instant response when a rescan is requested:

• TLS/SSL Configurations
• TLS/SSL Certificates
• Open Ports
• Server Software
• Web Application Security

The response provides the following details:

• Rescan status. The finding can have the following statuses:
  • Assumed Remediated
  • Not Remediated
  • Partially Remediated
• Details:
  • The expected finding grade if the grade changes with the rescan.
  • Remaining issues (if applicable).

Instant reply timeline:

1. The response is immediate, but it can take several minutes if the rescan is part of a bulk request.
2. It can take up to 72 hours for the impact to be reflected in the rating.