Home / Help centre / Scan profiles
Scan profiles
How do I add a focus rule so a scan concentrates on certain paths?
On the Scope section, find Focus rules and click + Add rule. Give it a description, choose a rule type such as Url Path, enter the value, and click Save. The scan then concentrates on what the rule names, which helps when one area matters most.
Steps
- Open the profile. Begin a new profile, or edit one with the pencil icon in Scan Profiles.
- Find Scope rules. Scroll down the Scope section to Scope rules and the Focus rules block. It reads "No rules." until you add one.
- Add a row. Click + Add rule to get a new row.
- Fill in the row. Write a short Description, pick the Type, and enter the Value.
- Save. Click Save in the footer.
Good to know
A focus rule tells the scan where to concentrate, for example on a new feature or a risky module. Cyberlop still maps the whole app first, so focus shapes the effort and does not hide the rest. An avoid rule does the opposite. Add as many rows as you need to either block.
| Field | What to enter |
|---|---|
| Description | A short note for your team, such as Billing API |
| Type | Url Path, Subdomain, Domain, Method, Header, Parameter or Code Path |
| Value | The path, host, method or name the rule applies to |
Use a Url Path rule when one area matters most. A good example is an API prefix you changed this week and want checked first. A Code Path rule can point a white-box scan at one folder of your repository. Focus narrows attention, so keep your rules few and clear, because a long list of narrow rules can leave large parts of the app untested without anyone noticing.
To take a rule off again, see how to delete a focus or avoid rule. Each type has its own article in scope rule types. Questions? Write to /contact.
Related questions
- What's the difference between focus rules and avoid rules?
- Which rule types can I use in focus and avoid rules?
- How do I exclude a URL path or subdomain from a scan?
- How do I focus a white-box scan on one part of my codebase?
- How do I delete a focus or avoid rule?
How to set focus and avoid rules on a scan profile
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.