What does a web application vulnerability scan include?

A web application vulnerability scan tests a running site for the flaws attackers exploit most often: injection, broken authentication, exposed data, misconfigured headers and outdated components. It does not prove the site is secure; it finds what can be found in the agreed scope and shows the evidence.

What is tested

• Input handling on forms, parameters and headers
• Session and authentication behaviour visible without credentials
• Security headers and transport configuration
• Known-vulnerable libraries and server components
• Exposed files, directories and debug endpoints

What is not tested in a starting-price scan

Authenticated flows, business logic and denial-of-service are out of scope unless agreed. The report lists exclusions explicitly.

What the report contains

Each finding carries a severity on the CVSS scale, the request that reproduces it, the affected endpoint, impact and a specific fix. The executive summary states what was tested, when, and what was not.