--- title: "Application Audit" url: "https://docs.indusface.com/en/article/application-audit" language: "en" last_updated: "2025-02-21T08:52:25.048Z" --- # Application Audit This tab displays all the **Application Audit\[AA\]** information like **AA Scans**, **List of Websites** registered, **Groups Info** in the form of widgets. Some of the scan categories are **Threats Identified During Last 5 Days,** **Threats Identified During Last Successful Scan etc**.  - Click **Application Audit** on the left navigation plane. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1553506654038/image.png) - Click **Scan Status** button to view the scans and services that are active or inactive. **Scan Status** pop-up appears. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1555913747084/image.png) - The **Scanned Websites** with **Vulnerabilities Found**, **Status** of the scan and **Action** column is displayed. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1555915126680/image.png) | **Parameter** | **Description** | | --- | --- | | URL | The URL of the scanned websites is displayed in this column. | | Vulnerability Found | The count of the vulnerabilities found from an application is displayed in this column.
Click **Download CSV** link to display the data in the respective format. | | Status | This column displays if a scan service is **Inactive** or **In progress**. | | Action | This column displays **Start** button for active services and **Pause** and **Stop** button for in progress scans. | ### Web Applications By default, **All Sites** option is selected by opening AA page. **In Group(s)** or **In Site(s)** options to display only a specific group or a website from the existing. ![](https://files.helpdocs.io/1fZENFEEfs/articles/qokecvk5ks/1531301701460/image.png) #### In Group(s) Click **In Group(s)** option from **Web Applications** drop-down. **Select Group** drop-down appears. ![](https://files.helpdocs.io/1fZENFEEfs/articles/qi9bVKR3vH/1531130741327/image.png) Click **Select Group** drop-down and click to select a group. The scan summary details of the group are displayed. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1531811870309/image.png) - **List of IP Address** in the group and various other AA scan reports of the selected group are displayed. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1553507108630/image.png) - Click ![](https://files.helpdocs.io/1fZENFEEfs/articles/qi9bVKR3vH/1521008139905/image-01.png)to download the report in **CSV** format. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1553510432920/image.png) #### List of URLs  - This widget displays the **Website URLs** registered for **Application Audit scan** and their **Scan Status**. - Scan Status is displayed  ![](https://files.helpdocs.io/1fZENFEEfs/articles/qi9bVKR3vH/1520919524673/image.png), if your **Application Audit\[AA\]** has passed the last Indusface WAS Security Scan. It does not have any critical alert. - Scan Status is displayed  ![](https://files.helpdocs.io/1fZENFEEfs/articles/qi9bVKR3vH/1520922967550/image.png), if **Indusface WAS** security scan is running or not yet started your AA service. - Scan Status is displayed  ![](https://files.helpdocs.io/1fZENFEEfs/articles/qi9bVKR3vH/1521006741264/image.png), if there is one or more critical alert found in the last AA scan ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1532289435435/image.png) #### In Site(s) - Click **In Site(s)** option from **Web Applications** drop-down. **Select Asset** option appears. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1531820580908/image.png) - Click **Select Asset** drop-down and click to select an asset. **Application Audit** scan details of the selected website is displayed. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1555482345315/image.png) - The AA scan details performed on a specific website like **Scan Summary**, **Threats Identified**, **Aging Summary**, and so on, are displayed. The AA information that is, **Website Name**, **Last Scan**, **Scan Status** and so on, are displayed. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1553512329899/image.png) #### Information The selected asset information like **Website URL**, **Last Scan**, **Schedule Time Slot** etc., is displayed in this field. **Remaining POC** option displays the number of POC requests that can be made. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1531824892693/image.png) > **Scan Status** is displayed as **Fail** if the recent scan is failed. #### Scan Summary This option displays the scan details such as Scan **Date**, **Scan Status**, **Scan Type**, and so on.  ![](https://cdn-assets.productfruits.com/a5ae3357-432d-4a1b-92a9-c0c365891838) - Click on the **Eye** icon in the **Download** column to download the scan summary data in **HTML** format.  - Click on the **PDF** icon in the **Download** column to download the scan summary data in **PDF** format.  - Click on the **Excel workbook** icon in the **Download** column to download the scan summary data in CSV format.   - The **URI Site Map** will be displayed only when the scanner provides the data.  #### Rescan/ Revalidate Scan   [YouTube video player](https://www.youtube.com/embed/aL8O-orU5VM?si=EKUxxMYtmp5RikCW) - The Rescan feature helps users to quickly rescan and revalidate their previous scan’s results. This helps users to save time on checking if the initially detected vulnerabilities in the previous scan have been fixed or not. - Here are a few important details:  - The **Start Rescan** button will be enabled only if there is a scan record present in the selected website.  ![](https://cdn-assets.productfruits.com/d6303133-272a-45f5-a978-229300ddf975) - To start the rescan, click on the **Start Rescan** button. The following confirmation pop-up appears next.  ![](https://cdn-assets.productfruits.com/53af69dd-a888-441d-8993-9199ecd972c5) - Click on the **Yes** button to request the rescan. The following success pop-up appears next. ![](https://cdn-assets.productfruits.com/095b93ef-9b16-4cc2-930a-d94249482ef3) Once the scan is completed successfully, the rescanned record will be displayed in Scan Summary table.  ![](https://cdn-assets.productfruits.com/d84419de-3f7f-4e75-a566-c9663509827d) > For a website, when the rescan is already in progress, if you request for the rescan, then, you will get an error pop-up showing the rescan is in progress. [YouTube video player](https://www.youtube.com/embed/aL8O-orU5VM?si=EKUxxMYtmp5RikCW) #### Scan Log Reports  - This report displays the following information on the vulnerabilities found - vulnerability title, severity, found on which website, vulnerability found date, and reopened date.   - To view the detailed report, click on the number in the Total column, and the Scan Log Reports page will open.  ![](https://cdn-assets.productfruits.com/8be5728d-fccc-4ce4-b001-1d2ae7b95149) - Users can download the scan log data by using the **Export PDF** and **Export CSV** options.  > The URI Site Map will be displayed only when the scanner provides the data. - Click on the **Show More** button to see the full details of the vulnerability and for the POC details click on the **Request POC** button.  - A confirmation pop-up will appear for POC requests. Click on the **OK** button to confirm.  ![](https://cdn-assets.productfruits.com/2809064c-f117-4247-b9fb-9266a521a81f) - Click on the **Evidence** button to see the POC details of the vulnerability and for the manual verification, click on the Request Manual Verification button.  - A confirmation pop-up will appear for manual verification. Click on the **OK** button to confirm. ![](https://cdn-assets.productfruits.com/e7f9809e-9a59-47ab-b5ff-8b8ee8a47ffe) #### Whitelisting Vulnerabilities  - Click on the **Whitelist** button to whitelist the vulnerability.  ![](https://cdn-assets.productfruits.com/7603b3fa-d719-4797-8332-0efd71106294) - A new window will open to enter the inputs. Select the **Alert** or **Plugin** which you want to whitelist.  - In the **Comments** field, enter the reason for whitelisting.  - In the **End Date** field, select a date till you want to whitelist the vulnerability, and then click on the **Submit** button.  - A confirmation pop-up will appear, click **OK** to confirm.  - Once the vulnerability is whitelisted successfully, an email will be sent to the user with basic details.  ![](https://cdn-assets.productfruits.com/5fdfa9f1-9d6f-45fe-87a1-3ed5a7b2a04a) - Also, the Whitelist button in the vulnerability field will turn as **whitelisted**.  ![](https://cdn-assets.productfruits.com/903ccac0-4aaf-418f-a5dd-c999a8cfc9a2) - When a user whitelists a plugin, all the vulnerabilities with the same title will be whitelisted automatically. #### Whitelisting Multiple Vulnerabilities  - To whitelist multiple vulnerabilities, select the vulnerabilities by clicking on the check boxes, and then, click on the Whitelist Alerts/ Plugins button.  - A new window will open to enter the inputs, select the Alert/Plugin button.  - In the **Comments** field, enter the reason for whitelisting.  - In the End Date field, select a date till you want to whitelist the vulnerability, and then click on the **Submit** button.  - A confirmation pop-up will appear, click **OK** to confirm.  - Once the vulnerability is whitelisted successfully, an email will be sent to the user with basic details.  ![](https://cdn-assets.productfruits.com/91d573bc-40a6-4dda-b1ef-eb4a9ebc528a) ![](https://cdn-assets.productfruits.com/3fcc102d-9dd9-4cd9-9112-1f71f46ca856) - Also, the Whitelist button in the vulnerability field will turn as **whitelisted**.  ![](https://cdn-assets.productfruits.com/0949a5d9-fc99-446d-a118-7a83ab142d9a) #### Threats Identified During Last Successful Scan - This widget displays the threats found in the last scan as **Critical**, **High**, **Medium**, and **Low** according to the severity in the form of a pie chart. In this example, only **Medium** vulnerabilities are discovered. - Click **All** drop-down and click to select **Manual PT** or **Automated Scan**. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1553513826507/image.png) #### Manual Fixed Vulnerabilities - The list of fixed vulnerabilities is displayed in this option. **Fixed Date**, **Title** of the Vulnerability, and the **Severity** of it. - Click a specific vulnerability to display further details. AA pop-up of a specific fixed vulnerability is displayed. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1555494846167/image.png) > Click **Next** button to view further vulnerabilities or click **Previous** button to go back. #### Aging Summary - This option displays the vulnerabilities open for last 30 (or) 90 (or) 180 days. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1555497029799/image.png) | **Parameter** | **Description** | | --- | --- | | Label | This option displays the number of days a vulnerability is open for ageing summary. | | Critical | This option displays the number of critical vulnerabilities open for the respective days. | | High | This option displays the number of high vulnerabilities open for the respective days. | | Medium | This option displays the number of medium vulnerabilities open for the respective days. | - Click **All** drop-down and select **Manual PT** or **Automated Scan** option to display the respective vulnerabilities. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1555501037588/image.png) - Click the number in respective vulnerability category (i.e., critical, high or medium) to view the further details. **Application Audit** **Details** pop-up appears. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1555497474893/image.png) - The Unique Alert ID, URL, Title of the vulnerability, and Severity of the open vulnerabilities is displayed. The general Description and Solution is displayed on the side. - Click **Show More** button of a specific open vulnerability to view further details. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1555498569332/image.png) #### Open Status Identified During Last Successful Scan - Three kinds of open statuses are available with a unique colour i.e., **Re-open**, **Open**, and **New**. Mouse over a specific status in the pie chart to view the percentage. - Click **All** drop-down, click **Manual PT** or **Automated Scan** to display respective vulnerabilities. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1555575132346/image.png)