How do I edit an existing scan profile?

Steps

1. Open Scan Profiles and click the pencil icon on the row. Or open the target page and click Edit on the profile in its Scan profiles card, which takes you to the same page.
2. The page title reads Edit scan profile. Pick a section on the left: Scope, Authentication or Reporting.
3. Change the fields you need. Rename the profile, add tags, tick other vulnerability classes, change your focus and avoid rules, edit a role, or adjust the report filters so the next scan covers what you want it to.
4. Leave password and secret fields empty if you do not want to change them.
5. Click Preview YAML if you want to check the result first.
6. Click Save.

Good to know

The Target field is read-only on this page. The help text says: "A profile's target is fixed after creation." If you need another target, make a new profile instead.

Stored secrets are never shown again. A role with saved form credentials shows the notice "Form credentials stored. Leave fields blank to keep it." Fill the fields only when you want to replace the login. The Clear button removes the stored credentials.

On a saved profile, Auto Generate from Repo under Application context is now enabled. That button stays greyed out on a new, unsaved profile.

Field	Editable?
Target	No, fixed after creation
Name, tags, classes, rules	Yes
Saved passwords and secrets	Hidden; blank keeps them
Report filters and guidance	Yes

The step-by-step blog version is how to edit a scan profile.

Related questions

• Why can't I change the target on my scan profile?
• How do I edit a role without re-entering its password?
• How do I clear stored form credentials from a role?
• How do I preview the YAML config a profile generates?
• How do I change a stored password on a role?

Full tutorial

How to edit a scan profile

Step-by-step, with annotated screenshots.

Updated 8 October 2026 · Back to the help centre