---
title: "API Scanning "
url: "https://docs.indusface.com/en/article/api-scanning-apptrana"
language: "en"
last_updated: "2025-11-28T10:38:36.052Z"
---

# API Scanning 

AppTrana allows users self-onboard their APIs and start automated security scans directly from the portal, simplifying API security and enabling faster vulnerability detection across the API lifecycle. 

## How to Onboard Your APIs for Automated Scanning 

From the left-side menu, click **API Security**. 

![](https://cdn-assets.productfruits.com/2212f2f9-fbe0-483e-a002-84bb4150f561) 

Use the **All Domains** filter to choose the site where your APIs are hosted. 

To upload Your API Collection, Click **Upload APIs**.  

![A screenshot of a computer  AI-generated content may be incorrect.](https://cdn-assets.productfruits.com/c0f619e8-cea4-46ed-8573-e3892da12254) 

Click **Choose File** and select the **.json Postman collection** containing your API endpoints. 

 ![](https://cdn-assets.productfruits.com/926880e6-5d73-4cef-baf9-bcb68c8f0bd7) 

Select the .json Postman file containing your API endpoints. Click **Open** to proceed. 

![](https://cdn-assets.productfruits.com/3137d997-6a37-4d99-ad6c-e03cc3a27eed) 

> Verify endpoints: only those matching the site’s base URL are selectable. 

After a successful upload, the scan configuration screen displays all **extracted endpoints**, ready for scanning. 

![A screenshot of a computer  AI-generated content may be incorrect.](https://cdn-assets.productfruits.com/2f63ee07-4385-4bc8-b845-bd06f258303d) 

## Configure APIs 

This section allows administrators to manage the security scanning settings of various API endpoints.  

**Key Sections** 

**License Usage** 

The License Usage section displays the number of API scan capacities or endpoints available for the current plan, including how many have been used and how many remain, across all API sites 

![](https://cdn-assets.productfruits.com/28f697d8-120f-4475-9cd5-944549bcad56)

**Import History -**This dropdown shows previous import actions if users uploaded an API spec (OpenAPI/Swagger) to compare or validate. 

**Search Bar** - Quickly find specific APIs by searching for the API name, method (GET, POST, etc.), or URI. 

**Methods -** Filters the list of APIs based on Methods like GET, POST, PUT, DELETE, etc. 

**Upload APIs**: Allows you to upload a file containing a list of APIs, making it easier to bulk configure endpoints. 

## ![A screenshot of a chat  AI-generated content may be incorrect.](https://cdn-assets.productfruits.com/2b784b52-e912-4869-b146-4beaedf74440) API Endpoint Table 

Each API is listed with its respective method, URI, and scan status. 

![A screenshot of a scan  AI-generated content may be incorrect.](https://cdn-assets.productfruits.com/852e82f5-4a96-490f-b25d-33a809d30633)

| **Parameters** | **Description** |
| --- | --- |
| **Endpoint** | Describes the API action or functionality (e.g., login, account transactions). |
| **Method** | The HTTP method used for the request (e.g., POST, GET). |
| **Enable Scan** | A toggle that enables or disables scanning for the respective API. If enabled, the API will undergo security testing to identify vulnerabilities. |
| **URI** | The full Uniform Resource Identifier (URI) for the API endpoint. |
| **Found On** | Displays the date and time when the API was last registered or discovered within the system. |

## **How to Configure API Scans** 

**Locate the API**: Use the search bar or scroll through the table to find the API endpoint you want to configure. 

**Enable or Disable Scan**: 

-   Toggle the "Enable Scan" button to the "ON" position to allow security scanning. 
-   Toggle to the "OFF" position to disable scanning for the endpoint. 
-   Use the bulk selection option at the top to enable or disable scanning for complete endpoints at once. 

![A screenshot of a computer  AI-generated content may be incorrect.](https://cdn-assets.productfruits.com/d3743711-a7e7-4269-83d4-5c76b8ddece9) 

-   **Review and Save**: Once you have configured the necessary APIs, click the **Save Changes** button to apply your settings. 

![A screenshot of a computer  AI-generated content may be incorrect.](https://cdn-assets.productfruits.com/9ddb88ae-1e4a-422b-8a91-b9b33b17adc8) 

-   A confirmation popup will appear, click Yes to proceed or Cancel to go back. 

![A screenshot of a computer  AI-generated content may be incorrect.](https://cdn-assets.productfruits.com/81084564-0716-4eea-9150-02049e600e8e) 

-   Upon confirmation, you’ll see the message: 

 “API definition updated successfully” 

![A screenshot of a computer  AI-generated content may be incorrect.](https://cdn-assets.productfruits.com/fe5176be-0382-4d27-ade2-b173225e6c94) 

### Start API Scan 

-   Click the **Manage Scans**.  

![](https://cdn-assets.productfruits.com/a4cf8723-8c75-47b9-aa03-f9e6070bd4a3) 

-   This will take you to the **Vulnerabilities → Previous Scans** section. 
-   Click **API Scan** to initiate scanning for the selected APIs. 
-   In the confirmation popup, click **Confirm**. 
-    A message will appear:  **“Scan has been scheduled successfully.”** 
-   The button label will change to **Stop Scan**, allowing you to stop the scan before completion if needed 

Once the scan is completed, results can be viewed under the **Previous Scans** tab in the **Selected API Scan** section. 

| **Parameter** | **Description** |
| --- | --- |
| Scan Started | Date and time the API scan was initiated. |
| Scan Finished | Date and time the scan was completed. |
| Total Vulnerabilities Found | Total number of issues discovered in selected API endpoints. |
| Exploits Blocked (last 30 days) | Number of exploitation attempts blocked in the last 30 days for those APIs |

###  Available Actions Post-Scan 

-   Download API Scan Report: Generate a detailed scan report in PDF format. 
-   API Scan: Trigger a new scan using the previously selected endpoints. 
-   Click Manage Scan in Previous Scans tab to manage your