Authenticated scans
An anonymous external scan doesn't see everything. With web credentials (login form) or SSH, Exposia deepens the analysis where your users and administrators actually access.
Benefits
- Web sessions Register test accounts and launch Wapiti or authenticated pipelines.
- Secure SSH Encrypted keys or passwords at rest; connection check before scanning.
- Heavy classification Authenticated scans are treated as deep scans (Pro or Advanced Target).
- ASVS coverage Some ASVS requirements require an authenticated context.
How it works
- 1. Create a credential Web account or SSH profile from Settings or Account.
- 2. Associate with a target Link the credential to the relevant host or URL.
- 3. Start the scan Choose an authenticated profile from the target page.
Frequently asked questions
Where are the secrets stored?
Encrypted at rest on Exposia infrastructure in Canada.
Can I use an admin account?
Use a dedicated test account with the minimum privileges necessary for auditing.
Plan required?
Heavy / Authenticated Scans: Pro or Advanced Target.