Scan Job Types

When Configuring a scan job, choose the scan type based on the discovery goal. Except for a credential-less scan, all types return the same discovery data.

Sequential

Recommended for most use cases. A sequential scan systematically works through the targets in the scan scope, scanning each discovered device with the credentials in the scan job’s keychain. It returns information about target systems and the applications running on them, such as web servers, application servers, and database servers.

Application

Identifies and maps all components of an application when only a single entry point is known. The scan connects to one server (the seed) using the provided credentials and, by identifying the network communications of key applications (databases, web servers, and so on) running on it, automatically expands the scope to other servers.

Neighborhood

Identifies and maps all servers communicating with a single server. Like an application scan, it connects to a seed server and automatically expands discovery to other servers based on the seed server’s network communications.

Credential-less

Scans the IP addresses or hostnames in a scope without using credentials. It identifies live devices and, where possible, their operating systems, producing a list of responding targets — but does not build a model of the environment.