Learn best practices for using the product.
Determine the technologies in use on your application that the content job will scan and refer to the following best practices for each type.
Performing a security scan in a production environment is risky; however, it might be necessary to scan a production environment, perhaps to comply with audit requirements, to detect whether your site has been hacked, or to validate that the SDLC process for integrating security scans is being employed.
The scan engine conducts over 1000 different tests and performs them multiple times.
This topic addresses general application questions.