A typical scan of a small app takes roughly an hour, according to the in-app Documentation. Larger apps take longer, and rate limits can slow a scan further. Open the running scan from Recent Scans to see its current phase. Slow does not mean failed.
The short version
A scan of a small app usually takes about an hour. That figure comes from the in-app Documentation page. Bigger codebases and apps with many pages take longer. In the scan list we captured, finished scans ran from about an hour and a half to about two and a half hours.
You do not need to stay on the page, because the run is durable and carries on if you close the tab, lose your connection or head home for the day. Check back later.
How it works in Cyberlop
Every scan moves through five phases. Each phase builds on the one before it, so the total time is the sum of all five.
| Phase | What happens |
|---|---|
| 1. Pre-recon | One agent reads the cloned repository and maps the frameworks, entry points and data flows. |
| 2. Recon | An agent maps the live app into a sitemap of endpoints. |
| 3. Vulnerability analysis | Eight specialists analyse the code in parallel, each in its own lane. |
| 4. Exploitation | Agents try to prove each hypothesis with a real browser. You can turn this phase off. |
| 5. Reporting | A final agent assembles the report from confirmed findings. |
Phase 3 runs its specialists side by side to keep a thorough scan fast. If your profile has Run exploitation phase switched off, the scan skips phase 4.
Rate limits from the AI provider can add waiting time, and Cyberlop handles them by retrying with growing pauses, then picking the work up again once the limit clears. The scan gets slower. It does not fail.
What to do next
- Open Recent Scans and click the row to see the current phase.
- Compare the Started and Finished times on past scans of the same profile to learn your own normal.
- If a scan runs far past that, read why a scan can take longer than usual.
- To see what is on screen while it runs, read what you can see on a running scan.
Related questions
- Why is my scan taking much longer than usual?
- What can I see on a scan while it's still running?
- What are the five phases of a Cyberlop scan?
- How do I see when a scan started and finished?
- How do I watch a scan while it's running?
How to run a pentest scan in Cyberlop, and what happens next
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.