Projects & Scan Targets - Snapsec Suite

Projects encapsulate target boundaries and access permissions for vulnerability scanning.

Defining Target Scopes

Snapsec supports diverse target representations:

Web Applications: https://app.example.com, https://admin.example.com/portal/
APIs: OpenAPI v3 JSON/YAML URLs, Postman collection files, or GraphQL endpoint URLs.
Network Ranges: Individual IPs (192.168.1.10) or CIDR subnets (10.0.0.0/24).
Cloud Containers: Image references in ECR, GCR, or Docker Hub.

Blacklists & Out-of-Scope Exclusions

Protect fragile third-party endpoints or destructive functions by configuring strict exclusions:

exclusions:
  paths:
    - "/logout"
    - "/auth/signout"
    - "/admin/destroy-database"
  parameters:
    - "delete_all"
    - "reset_token"