How do I watch a scan while it's running?

Steps

You do not need to stay on the page. The run is durable and carries on without you.

1. Go to Recent Scans. Choose it in the sidebar.
2. Click the running row. Its detail page opens.
3. Read the Overview. Look at status, phase, cost and tokens.
4. Check the tabs. Open Sitemap and Findings to see what has arrived.
5. Press Refresh. Click ⟳ Refresh for the latest status.

Good to know

The documentation describes the live view as the run status, per-agent progress, and live cost, token and lines-of-code counters. The recon sitemap fills in as endpoints are found, and findings appear in their tab as they arrive.

A typical scan of a small app takes roughly an hour. The low-level workflow log is reserved for the platform administrator, so you will not see it.

Five phases make up a run: pre-recon, recon, vulnerability analysis, exploitation and reporting. The exploitation phase can be switched off in the profile.

What you will see

The first scan of a profile can take longer than a repeat, and a large app takes longer than a small one. A quiet page does not mean a stalled scan. Check the Started time, press Refresh, and give the run time. For a run that ends early, read the red banner on the detail page.

Pages that you opened early may show few endpoints, because recon finds them in stages and the sitemap grows over the run. By the time analysis starts, the list is much longer. Be patient.

Related questions

• What can I see on a scan while it's still running?
• How do I get the latest status on a scan's page?
• How long does a scan take?
• Why can't I see the raw workflow log for my scan?
• What happens in the recon phase?

Full tutorial

The scan detail page: how to read a Cyberlop scan from Overview to Diff

Step-by-step, with annotated screenshots.

Updated 8 October 2026 · Back to the help centre