> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Assessment Troubleshooting

> Diagnose common issues such as WAF blocks, IP bans, authentication session drops, and timeouts.

Resolve common hurdles encountered during autonomous penetration tests.

***

## Common Issues & Resolutions

### 1. WAF Blocking Scanner Traffic

* *Symptom*: Scanner receives repeated HTTP `403 Forbidden` or Cloudflare challenge pages.
* *Solution*: Configure custom bypass headers in your WAF or allowlist Snapsec scanner egress IP addresses.

### 2. Session Invalidation / Auth Token Expiry

* *Symptom*: Test user is logged out midway through assessment.
* *Solution*: Configure **OAuth2 Auto-Refresh** in your project scan profile to automatically renew tokens.

### 3. Application Latency Spikes

* *Symptom*: Server returns `504 Gateway Timeout`.
* *Solution*: Lower **Max Requests Per Second (RPS)** in the scan configuration.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.