Prior to a rescan, we recommend verifying the finding has been remediated and confirming your ownership of an asset and its configurations. Refer to the Regional Internet Registry (RIR WHOIS) for your area.
If the finding is remediated and you own the asset, you can attempt to rescan the finding. If your company no longer owns the asset, request to remove it via the workflow in the Expired Infrastructure article.
Rescan Instructions
- Invite a company to the Client/Vendor Access Program and ask them to request a rescan for their organization.
Once a rescan request is submitted for a finding, the Rescan Status
column indicates the scanning status. See statuses.
Refer to each risk vector’s User-Requested Rescan Duration, as outlined in Rescan by Risk Vector
Troubleshooting
If a finding couldn’t be rescanned, it may be because:
- An asset is online but we can’t get sufficient data from it. Security systems (like firewalls, web application firewalls, and other traffic blocking technologies) may inadvertently be blocking the connection attempt.
- The asset could not be found. See details on the Asset Not Found and Assumed Remediated statuses.
Rescan a finding again to be sure it can’t be updated.
Asset Not Reached finding rescan status, Asset Not Found finding rescan status
If the rescan button is not available, then the finding is not eligible for rescan. This may be because:
- The risk vector does not support user-requested rescans, such as Patching Cadence.
- You do not own the asset. You can only rescan findings for your organization (My Company and SPM Subsidiaries).
- April 24, 2025: Rescan status icons changed to text values.
- February 26, 2025: Refresh renamed to rescan. Asset Not Reached renamed to Asset Not Found.
- January 16, 2025: Rescan button missing.
Feedback
0 comments
Please sign in to leave a comment.