> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Projects & Scan Targets

> Define scannable scopes, target boundaries, exclusions, and project ownership.

Projects encapsulate target boundaries and access permissions for vulnerability scanning.

***

## Defining Target Scopes

Snapsec supports diverse target representations:

* **Web Applications**: `https://app.example.com`, `https://admin.example.com/portal/`
* **APIs**: OpenAPI v3 JSON/YAML URLs, Postman collection files, or GraphQL endpoint URLs.
* **Network Ranges**: Individual IPs (`192.168.1.10`) or CIDR subnets (`10.0.0.0/24`).
* **Cloud Containers**: Image references in ECR, GCR, or Docker Hub.

***

## Blacklists & Out-of-Scope Exclusions

Protect fragile third-party endpoints or destructive functions by configuring strict exclusions:

```yaml theme={null}
exclusions:
  paths:
    - "/logout"
    - "/auth/signout"
    - "/admin/destroy-database"
  parameters:
    - "delete_all"
    - "reset_token"
```


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.