> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Scan Profiles

> Configure how your web application scans behave using customizable profiles.

## Overview

Scan Profiles define **how your scanner behaves during execution**.

They control request configuration, rate limits, and headers—allowing you to tailor scans for different environments like staging, production, or protected applications.

***

## Profile Configuration

<Frame caption="Create and configure scan profiles">
  <img src="https://mintcdn.com/snapsec-23724fa2/aZLEYeQLXxfw1fat/images/was/scan-profiles.png?fit=max&auto=format&n=aZLEYeQLXxfw1fat&q=85&s=9862394955cf334dad315c9a5dbd8332" width="1901" height="922" data-path="images/was/scan-profiles.png" />
</Frame>

### Profile Details

* **Profile Name**
  Identify the purpose of the scan (e.g., *Rate Limit Profile*, *Cloudflare Bypass*)

***

## Custom Headers

<Frame caption="Add custom headers for authenticated or protected scans">
  <img src="https://mintcdn.com/snapsec-23724fa2/aZLEYeQLXxfw1fat/images/was/scan-profiles-custom-headers.png?fit=max&auto=format&n=aZLEYeQLXxfw1fat&q=85&s=1015987d807412a02b89a0550ce658eb" width="1595" height="245" data-path="images/was/scan-profiles-custom-headers.png" />
</Frame>

Custom headers allow you to simulate real user or authenticated traffic.

### Common Use Cases

* Add `Authorization` tokens (JWT, API Keys)
* Include session cookies
* Bypass WAF/CDN protections
* Test authenticated endpoints

***

## Key Controls

### Override Host

Replace the target host during scan execution.

**Use Case:**

* Scan staging while routing through production domain
* Test internal services behind reverse proxies

***

### Rate Limiting

Control how aggressive your scan is.

* Define requests per second
* Prevent server overload
* Avoid triggering rate-limiting or blocking mechanisms

***

## Existing Profiles

Profiles can be reused across applications.

### Examples

* **Rate Limit Profile** → Controlled scanning for production
* **Host Override** → Custom routing for testing environments
* **Cloudflare Bypass** → Headers configured to bypass protections

Each profile supports:

* Edit configuration
* Delete when no longer needed

***

## Why It Matters

Scan Profiles give you control over **how your scanner interacts with real systems**.

### Key Benefits

* Safe scanning in production environments
* Authenticated testing for deeper coverage
* Reduced false positives from blocked requests
* Flexible configuration for different deployment setups
* Better alignment with real-world traffic behavior

***

## Explore Live Demo

<Card title="Explore WAS Live — No Signup Needed" icon="wand-magic-sparkles" href="https://suite.snapsec.co/demo">
  Create scan profiles tailored for your infrastructure and security needs.
</Card>