Free scans
The public scan from the landing page: submit, watch, and read the report by token.
| Method | Path | Needs | Returns |
|---|---|---|---|
| POST | /free-scans | public, rate limited | 202 { freeScanRequestId, scan, statusToken, joinedExistingScan } |
| GET | /free-scans/:scanId/status?token= | the status token | scan status with a progressLabel |
| GET | /free-scans/:scanId/events?token= | the status token | server-sent events: status, step, finding, done |
| GET | /free-reports/:token | the report token | { status, progressLabel, message, report? } |
A free scan takes a URL and an email, nothing else. The same email may start 3 scans a day and the same hostname waits 30 minutes between scans; a scan already running for that hostname is joined rather than repeated. The report link in the email carries the token.
Something here wrong, missing or out of date? Tell us and we will fix the page.