Queue an asynchronous scan of an asset you own or are explicitly authorized to test.
This route requires Enterprise access. Validate the target against an allowlist before sending the request.

​
Request

your-owned-domain.example is a placeholder. Replace it only with an authorized target. The .example top-level domain is reserved for documentation and is not a live scan target.

​
Response

Preserve the submitted target when classifying the request. Do not rely on the response type field to infer whether the input was a domain, IP, or CIDR.

​
Limits and credits

  • Rate limit: 10 requests per minute
  • A queued, non-deduplicated request consumes scan credit
  • A request returns 403 when the account has no remaining scan credits
  • Private or invalid IP ranges are rejected

​
Status and results

This Enterprise route does not expose a matching status endpoint. The request only confirms that the scan was queued. Results are incorporated into FullHunt datasets as processing completes. OEM integrations that need deterministic polling should use OEM On-Demand Scan, which includes POST /oem/on-demand-scan/scan-status.

​
Error handling

Do not retry validation or authorization failures without changing the request or account configuration.