Creating an Incremental scan

About this task

An incremental scan can save time by utilizing the results of a previous scan and testing either:
  • New parts of the application as well as those parts of the application where an issue was previously found, or
  • Only new parts of the application

An incremental scan includes an Explore stage to discover the current structure of the application and identify what is new compared with the base scan. This is followed by a Test stage that offers the above two options.

Note: Incremental scanning can be very useful if you want to run frequent and faster scans, but it is recommended to run full scans from time to time, in case new bugs occur in previously error-free parts of your application.

Procedure

  1. To execute an incremental scan, you can rescan a completed or partially completed DAST scan through any of the following methods:
    1. Scans and sessions > DAST Scans. From the ellipsis menu , click Rescan.
    2. Applications > Application name > Scans and sessions > DAST Scans. From the ellipsis menu , click Rescan.
    Note: You can also access the Rescan option on an individual scan page from the Manage scan drop-down.
  2. In the Rescan dialog box, select the Incremental scan option.
  3. Select the base scan from the Base scan drop-down menu.
    Note: Only scans that were executed within the last 60 days and were either completed or partially completed are available for selection.
  4. Select which type of retest option you want to apply to the scan:
    • Yes, test new parts of the application and also retest for previously found issues.
    • No, test only new parts of the application.
  5. Click Review and scan.
  6. Review the summary and click Scan now.

What to do next

  • You can view the status of the scan on the Scans and sessions page. The incremental scan icon icon indicates an incremental scan.