Common Issues & Resolutions
1. WAF Blocking Scanner Traffic
- Symptom: Scanner receives repeated HTTP
403 Forbiddenor Cloudflare challenge pages. - Solution: Configure custom bypass headers in your WAF or allowlist Snapsec scanner egress IP addresses.
2. Session Invalidation / Auth Token Expiry
- Symptom: Test user is logged out midway through assessment.
- Solution: Configure OAuth2 Auto-Refresh in your project scan profile to automatically renew tokens.
3. Application Latency Spikes
- Symptom: Server returns
504 Gateway Timeout. - Solution: Lower Max Requests Per Second (RPS) in the scan configuration.