Queue a scan of an authorized domain, hostname, public IP, or public CIDR range through the Enterprise API.

​
Request

Replace the placeholder only with an asset you own or are explicitly authorized to test. Do not use public third-party infrastructure as a scan example.

​
Behavior

  • Rate limit: 10 requests per minute
  • The target must be a domain or IP range registered under one of your organizations; otherwise the route returns 403
  • Each newly queued scan deducts one credit. A repeat of the same target within 24 hours reuses the existing scan and is not charged. With no remaining credits the route returns 403
  • The response confirms queueing, not completion: {status, message, target, scan_id, deduplicated}. deduplicated: true means an existing scan from the last 24 hours was reused
  • If scan submission is temporarily disabled the route returns 503; nothing is charged
  • No Enterprise scan-status endpoint is documented
For an OEM integration with status polling, use OEM On-Demand Scan and Orchestrate an OEM Scan Lifecycle.