馃帹 Design: Add additional customization options for scanner and site profiles
Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.
Actionable Insights
Actionable insights always have a follow-up action that needs to take place as a result of the research observation or data, and a clear recommendation or action associated with it. An actionable insight both defines the insight and clearly calls out the next step. These insights are tracked over time.
| Dovetail link: | https://dovetailapp.com/projects/354235e3-a3d8-41d2-a87e-df06f03f6326/insights/9a54dce4-3646-4005-865a-803fcb6faef4 |
| Details: | Users mentioned some ways in which they鈥檇 like to customize their scanner and site profiles. |
| Action to take: | Add additional customization options to both scanner and site profiles (examples below) |
Why do users want more customization options?
-
Not hit a website too hard and cause latency on production
-
Save time (create a profile that only does a basic scan, and maybe one that hits everything, and another one that鈥檚 sort of in the middle)
Customization examples:
For scanner profiles:
-
Scan for specific types of vulnerabilities (example: SQL injections)
-
Set client or system proxy
-
Choose different technology stacks (?)
-
Limit time for scan
For site profiles:
- Add an Allowlist (or Denylist) for specific URLs (in case you鈥檙e using CDNs or other external resources)