Home / Help centre / Scan profiles
Scan profiles
Which rule types can I use in focus and avoid rules?
Focus and avoid rules offer seven types in the Type menu: Url Path, Subdomain, Domain, Method, Header, Parameter and Code Path. Each row also has a Description and a Value. The same seven types are available in both lists.
The short version
Each rule row has a Type menu with seven choices. The type tells Cyberlop what kind of thing the Value field refers to. The menu is identical for focus rules and avoid rules.
How it works in Cyberlop
Open Scan Profiles, start or edit a profile, and stay in the Scope section. Under Scope rules, click + Add rule in either list. Choose a type, type a value, and add a short description so the next person understands why the rule exists.
| Type | Refers to | Example value |
|---|---|---|
| Url Path | A path on the site | /checkout |
| Subdomain | One host under your domain | api |
| Domain | A whole domain | example.com |
| Method | An HTTP method | DELETE |
| Header | An HTTP header | X-Debug |
| Parameter | A request parameter | redirect |
| Code Path | A folder or file in the repository | src/payments/ |
The example values are ours. The app shows only the field names, so check how a value reads on your own target before you rely on a rule. Preview the result with Preview YAML to see how the rule is written out.
What to do next
Match the type to the problem. Use Url Path, Subdomain or Domain to mark places. Use Method, Header or Parameter to mark kinds of request. Use Code Path to mark parts of the source, which only matters on white-box targets because black-box targets have no repository.
The guides for single cases are avoid an HTTP method, focus on a code path and avoid a parameter. To see the difference between the two lists, read focus rules versus avoid rules.
Related questions
- What's the difference between focus rules and avoid rules?
- How do I stop a scan from testing a certain HTTP method?
- How do I focus a white-box scan on one part of my codebase?
- How do I keep the scanner away from a particular parameter or header?
- How do I exclude a URL path or subdomain from a scan?
How to set focus and avoid rules on a scan profile
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.