Skip to main content

Manage analyses and scans

Manage analyses and scans for Veracode Dynamic Analysis in the Veracode Platform or using the REST API.

To perform these tasks, ensure you meet the prerequisites.

Update authentication settings

Add or update your login credentials in an analysis for accessing the web applications or APIs at the specified URLs.

To complete this task:

  1. Sign in to the Veracode Platform.
  2. Select Scans & Analysis > Dynamic Analysis.
  3. In the All Dynamic Analyses table, select the analysis you want to configure.
  4. In the URLs List or API Specifications List table, locate the web URL or API server you want to configure.
  5. In the Actions column, select Configure.
  6. In the Configure window, scroll to the Authentication section.
  7. Select Required, if not selected.
  8. For a web application, Auto-login is the default. Enter the username and password. For APIs or web applications that require additional authentication, such as basic authentication (browser-generated) or a login script (web applications only), select the checkbox for that option and enter the configuration settings. For more information, see the authentication methods for scanning web applications or APIs.

Prescan web applications and APIs

You can prescan all URLs or API servers in a Dynamic Analysis to verify that we can reach and, if necessary, authenticate with each target web application URL or API endpoint.

Prescanning saves time by alerting you to any issues that Veracode finds with the configuration before the Dynamic Analysis runs.

To complete this task:

  1. Go to the Schedule page of the Dynamic Analysis workflow and select the Prescan Only option. The prescan starts immediately after submission. When the prescan completes, you receive an email notification of the results. The Dynamic Analysis still starts regardless of the results of the prescan.
  2. If the prescan fails, check your connections and authentication configuration settings, and run prescan again.
  3. If you need assistance from Veracode with any of the issues found during prescan, select Contact Support in the bottom-left of the Review and Submit window.

Results:

The prescan results are available on the Dynamic Analysis summary page. You can view the details of the prescan at any time by going to the URL row and, either clicking the URL or selecting View Prescan Details in the Actions column.

Additional troubleshooting information is available in the Verification Screenshots section, which provides screenshot images that the Veracode scan engine takes at predetermined points. You can use these images to gain insight into what the scan engine discovers during a Dynamic Analysis. For example, the Authentication: Logged In screenshot can verify that the page on which the scan engine lands after executing the login script matches expectations. The Connection: Target URL screenshot can determine that a login script failed because a page redirects to different content for requests that originate from outside the corporate intranet.

Verification Screenshots

Screenshot typeDescription
Connection: Target URLThe web page state seen by the Veracode scan engine at the end of connection verification, at the start of a scan or prescan.
Authentication: Consecutive Login FailureShown after the Veracode scan engine is unable to log in to a target application after 50 consecutive attempts.
Authentication: Logged InShown after the Veracode scan engine executes a user-provided Selenium login script. If the best practice of including a verification command in the Selenium script is not followed, the screenshot might show an early snapshot of the page, which might not show what the site really looks like when logged in.
Authentication: Logged OutShown after the Veracode scan engine executes a user-provided Selenium logout script. Logout scripts are optional, and this screenshot is omitted if one is not specified.
Authentication FailureShown if the Veracode scan engine encounters an error while verifying authentication using a user-specified login or logout script.

Prescan Notes

Displays one or more scan notes based on the following severities.

  • Information: non-actionable issues encountered by the scan engine.
  • Warning: issues that could impact coverage of the scan. For example, a login script that does not contain commands to verify its successful execution could possibly fail in future scans.
  • Error: exceptions that have resulted in early scan termination, such as the repeated inability to execute Selenium scripts due to a site changing during a scheduled scan.

Prescan errors

Prescan errors comprise two types: connection errors and authentication errors. You can review any prescan errors for a Dynamic Analysis in the Veracode Platform. All prescan errors relate to connection, auto-login, basic authentication, or login script issues.

The Prescan Details window provides information for fixing a specific error. To open the Prescan Details window, on Dynamic Analysis summary page, in the row of the URL scan you want to review, select Actions > View Prescan Details.

Connection errors

These tables provide corrective actions for prescan connection and authentication errors. After troubleshooting the problem you are experiencing, verify the Dynamic Analysis configuration and run prescan again. If a failure persists, contact Veracode Technical Support.

Error messageDefinition and corrective actions
Unresolvable hostnameVeracode was not able to resolve the hostname. Verify the hostname and try again.
Unreachable portVeracode was not able to reach the destination port. Verify the port and try again.
Connection errorVeracode was not able to connect to the target URL. Verify the URL and its connectivity, and try again.
Server errorThere is an error on the target server. Verify the server is connected and available, and try again.
No target foundVeracode did not find the target URL at the site. Verify you have entered the correct URL and try again.
Empty response receivedVeracode received an empty response from the target URL. Verify the web server is correctly configured and try again.
Blocklisted URLThis URL is on the blocklist and will not be analyzed. Enter a new URL.
No response from serverVeracode received no response from the host server of the target URL. Verify the URL and its connectivity, and try again.
Non-allowlisted URLThis URL is not on the allowlist and will not be analyzed. Enter a new URL.
Excessive redirectThis URL has an infinite or excessively long redirection loop and will not be analyzed. Enter a new URL.
Timeout errorThis URL returned an HTTP protocol-level timeout error indicating there is a problem with network congestion or connection throttling by a proxy server. Verify your network infrastructure and connectivity, and try again.
Malformed URLThis URL does not adhere to the URI syntax. Re-enter the URL with the correct syntax.
Non-allowlisted URL redirectionThe request to the target URL results in a redirection. Verify the URL and try again.
Blocklisted URL redirectionThe request to the target URL redirects to a URL that is on the blocklist and will not be analyzed. Enter a new URL.

For connection errors, review:

  • In the Connection section, the Authentication Verification, Login Successes, and Login Failures fields for the specific reason why you have an authentication issue
  • Request and Response section for any 4xxx-5xx response codes
  • Prescan Notes for any warning notes

If Veracode cannot connect to the target URL, verify:

  • URL is spelled correctly and uses the correct protocol.
  • URL is live and available.
  • 34.195.146.191 is on your allowlist.
  • If there is heavy traffic causing the connection to fail.

Authentication errors

Error messageDefinition and corrective actions
Missing credentialsYou have not provided any browser-based credentials. Enter the credentials and try again.
Invalid credentialsThe browser-based credentials you provided are invalid. Verify the credentials and try again.
Selenium script failureThe Selenium login script you provided has failed. Record a new script and try again.
Browser failureThe browser was unresponsive while executing the login script. Record a new script and try again.
Verification text failureThe verification text failed. Verify that the verification text is present on the page after login.
Auto-login failureAuto-login failed. Verify your credentials and try again.
Verification text failureThe verification text failed. Edit the login script to provide the verification text that is only present after successful login.
Authentication alertNo browser authentication was encountered. Verify the type of authentication necessary for the website and try again.
Logout pattern failureNo logout patterns were detected. Verify the logout pattern, ensure that at least one resource that requires authentication is accessible from the target URL. Then, try again.
Logout pattern failureToo many logout patterns were detected. Verify the logout pattern and the authentication credentials, and try again.
Logout pattern failureVeracode could not detect any logout patterns. Contact Veracode Technical Support if this error persists.
Logout pattern failureVeracode detected numerous logout patterns. Verify the logout pattern and authentication credentials, and try again.
Blocklisted URLThe login verification is blocklisted. Change the URL or remove it from the blocklist.
URL errorRequests to the login verification URL resulted in a network error. Correct the URL and ensure your web server is online.
Non-allowlisted URLThe login verification URL is not an allowed host. Change the URL and ensure it is not on the blocklist.
Redirection errorRequests to the login verification URL resulted in numerous HTTP redirects. Correct the URL or change the redirects.
Unsuccessful responseRequests to the login verification URL resulted in an unsuccessful HTTP response. Correct the URL and ensure your web server is online.
Malformed URLThe login verification URL does not adhere to URL syntax. Correct the URL and try again.
Non-allowlisted URLThe login verification URL redirects to a URL that is not an allowed host. Correct the URL and try again.
Blocklisted URLThe login verification URL redirects to a URL that is on the blocklist. Correct the URL or change the redirects, and try again.

For authentication errors, review:

  • The Authentication Verification, Login Successes, and Login Failures fields for the specific reason why you have an authentication issue
  • The Verification Screenshots section for any authentication failure
  • The Prescan Notes for any warning notes

If you have provided a login script, you can select a verification screenshot of the associated login errors.

If authentication has failed, verify:

  • You are using the correct username, password, and domain (if applicable). The Login Successes and Login Failures fields indicate if auto-login is working.
  • Any login script, verification URL, and verification text you provided is still valid. The Authentication Verification field indicates at which point in your script an error occurred, saving you troubleshooting time.

Schedule an analysis

You can schedule a Dynamic Analysis to run one time, either immediately after you submit it or on a specific date, or on a recurring schedule. You can also schedule the analysis to pause and resume on specific days or times.

To configure a schedule with the REST API, see Dynamic Analysis REST API.

Important

Because Dynamic Analysis scans each API specification quickly, We recommend that you do not pause and resume the analysis.

Schedule a one-time scan

You can schedule a Dynamic Analysis in the Veracode Platform to run only one time. When you are ready to run the analysis, you can start it immediately or schedule it to run on a date up to 90 days in the future. You can also configure the analysis to run on a recurring schedule.

You can also a schedule an analysis with the REST API.

Before you begin:

Ensure you have:

  • A Veracode account with the Creator, Submitter, or Security Lead role.
  • If you want your analysis to automatically pause when it encounters an authentication error, your account must have the Auto-Pause feature. You can configure the analysis to resume automatically or manually. To enable this feature, contact Veracode Technical Support.
  • Created a Dynamic Analysis of a web application or API and selected Schedule at the bottom of the page in the Veracode Platform.

To complete this task:

  1. On the Dynamic Analysis Schedule and Prescan page, for Frequency, select Once.

  2. If you are configuring an existing analysis that has already run, and you want to run it again using the updated schedule, select Scan again with this configuration and updated start date and time. If you are creating a new analysis, you do not see this option.

  3. Optionally, to run a prescan before the analysis starts, turn on Prescan. Because a prescan requires two hours to run, the start time must be at least two hours in the future, or Prescan is disabled. After you update the start time, Prescan is enabled.

  4. For Start, select the date and time when you want the analysis to start.

  5. For Analysis Duration, enter the maximum number of hours or days that you want the analysis to run.

  6. In the Pause and Resume section, if your account has the Auto-Pause feature, you see the Pause automatically and resume option. If your account does not have this feature, you see an Off option, and you can ignore this step.

    Select one of the following options:

    • manually: the analysis remains paused until you fix the error and resume it manually. The default.
    • automatically: after you fix the error, you must wait for the analysis to resume. You cannot resume the analysis manually. The analysis resumes during the next scheduled run.
  7. To schedule the analysis to pause automatically, so that it only runs on specific days or during specific times, select Pause. Then, select from the following options:

    • on these days: pause the analysis on the selected days.
    • during this period: pause the analysis every day during the selected period.
    • on these days, during these periods: pause the analysis on the selected days, during the selected periods.

    The analysis resumes automatically, outside the configured pause schedule.

  8. Optionally, to review a summary of the schedule, select Preview Schedule.

  9. To save the schedule and continue to the next steps, select Review and Submit.

Schedule a recurring scan

You can configure a recurring schedule of your Dynamic Analysis in the Veracode Platform to run on a set day and time each week or month. You can also schedule the analysis to automatically pause and resume at specific times, such as IT downtimes or high-traffic timeframes.

You only have to configure the pause and resume schedule once, and it recurs automatically without any further manual intervention for the duration of the analysis. You can edit the pause and resume schedule or turn it off at any time.

You can also schedule a recurring analysis with the REST API.

Before you begin:

Ensure you have:

  • A Veracode account with the Creator, Submitter, or Security Lead role.
  • If you want your analysis to automatically pause when it encounters an authentication error, your account must have the Auto-Pause feature. You can configure the analysis to resume automatically or manually. To enable this feature, contact Veracode Technical Support.
  • Created a Dynamic Analysis of a web application or API and selected Schedule at the bottom of the page in the Veracode Platform.

To complete this task:

  1. On the Dynamic Analysis Schedule and Prescan page, for Frequency, select Recurring.

  2. Optionally, to run a prescan before the analysis starts, turn on Prescan. Because a prescan requires two hours to run, the start time must be at least two hours in the future, or Prescan is disabled. After you update the start time, Prescan is enabled.

  3. For Start, enter the date when you want the schedule to start, or select the calendar icon and select a date. If you set the start day for the 28th or later, the analysis starts on the last day of the month.

  4. From the Recur dropdown, select Weekly or Monthly.

  5. For Every, enter the recurrence frequency in weeks or months.

  6. From the On dropdown menu, select the day on which you want the scan to recur.

  7. For End After, enter the number of weeks or months that you want the recurrence schedule to last.

  8. For Start, select the date and time when you want the analysis to start.

  9. For Analysis Duration, enter the maximum number of hours or days that you want the analysis to run.

  10. In the Pause and Resume section, if your account has the Auto-Pause feature, you see the Pause automatically and resume option. If your account does not have this feature, you see an Off option, and you can ignore this step.

    Select one of the following options:

    • manually: the analysis remains paused until you fix the error and resume it manually. The default.
    • automatically: after you fix the error, you must wait for the analysis to resume. You cannot resume the analysis manually. The analysis resumes during the next scheduled run.
  11. To schedule the analysis to pause automatically, so that it only runs on specific days or during specific times, select Pause. Then, select from the following options:

    • on these days: pause the analysis on the selected days.
    • during this period: pause the analysis every day during the selected period.
    • on these days, during these periods: pause the analysis on the selected days, during the selected periods.

    The analysis resumes automatically, outside the configured pause schedule.

  12. Optionally, to review a summary of the schedule, select Preview Schedule.

  13. To save the schedule and continue to the next steps, select Review and Submit.

Check the status of a scheduled scan

After you submit the Dynamic Analysis, the summary of the schedule displays at the top of the summary of the Dynamic Analysis. You receive an email notification of any verification errors and also when the Dynamic Analysis is complete.

From the All Dynamic Analysis Scans page, you can review the schedule of any Dynamic Analysis by hovering over the clock icon in the row for that Dynamic Analysis. The respective schedule displays, providing at-a-glance information. If a Dynamic Analysis is scheduled to run only once or if the recurrence timeframe has ended, you can verify the status of the schedule to see if any more occurrences are scheduled.

To complete this task:

  1. In the Veracode Platform, select Scans & Analysis > Dynamic Analysis.
  2. In the list of All Dynamic Analysis Scans, select Edit from the action menu in the row of the Dynamic Analysis that you want to check.
  3. At the bottom of the Edit page, select Schedule. In the Dynamic Analysis Scheduling section, you can see if the analysis is scheduled.
  4. If the analysis is scheduled, and you want to cancel it, select Cancel schedule and save for later.

Stop a scheduled scan

You can stop a Dynamic Analysis that runs on a schedule. When stopping the scan, you can choose to save or delete the available scan results.

To complete this task:

  1. In the Veracode Platform, select Scans & Analysis > Dynamic Analysis. The All Dynamic Analyses page opens.

  2. Locate the row for the Dynamic Analysis you want to stop.

  3. From Actions, select Stop Analysis.

  4. Select to stop the analysis and to either save or delete the results.

  5. Select View Results in the Actions column to review the results.

    If you want to run the Dynamic Analysis again with the same configuration, edit the schedule to rerun the scan on your new selected day and time.

Manually resume a paused scan

You can manually resume a scheduled Dynamic Analysis that is paused due to an authentication error.

For example, if an analysis uses invalid credentials to sign in to a target URL or API, after multiple attempts, the analysis changes to a paused state. After you update the credentials in the analysis configuration for a web application or API, you can manually resume the analysis. The analysis resumes its schedule and uses the updated credentials to sign in.

Before you begin:

Ensure you have:

  • Enabled the Auto-Pause feature for your Veracode account. To enable this feature, contact Veracode Technical Support.
  • A Veracode account with the Creator, Submitter, or Security Lead role.
  • Created a Dynamic Analysis that is scheduled to run one-time or on a recurring schedule. In the Veracode Platform, on the Schedule page for the analysis, in the Pause and Resume section, ensure Pause automatically and resume is set to manually.
  • Resolved the authentication errors.

To complete this task:

  1. In the Veracode Platform, select Scans & Analysis > Dynamic Analysis.
  2. On the All Dynamic Analyses page, locate the row for the analysis you want to resume.
  3. From Actions , select Resume Analysis. When you scheduled the analysis, if you set Pause automatically and resume to resume automatically, the Resume Analysis action is disabled. The analysis resumes and continues to run on its schedule.

View historical details for an analysis

You can view detailed information about all occurrences of a Dynamic Analysis, including scan results, in the Veracode Platform.

You can use the historical information to understand when the analysis and scans, occurred, how often, the analysis duration, the schedule, if any, its current status, and whether it completed successfully. The past occurrences are read-only as they provide an historical record for the selected analysis. You can only change the most recent occurrence of an analysis.

You can also get the historical information with the REST API.

Before you begin:

You must have the Creator, Reviewer, or Security Lead role. Any member of the team associated with the Dynamic Analysis is able to view the analysis and its results.

To complete this task:

  1. In the Veracode Platform, select Scans & Analysis > Dynamic Analysis. The All Dynamic Analyses page opens.

  2. Locate the row for the Dynamic Analysis for which you want to view historical information.

  3. To open the Analysis History window, from Actions at the end of the row, select View Analysis History.

    The Analysis History window shows a list of past occurrences for the selected analysis with the following information:

    • Analysis Occurrence ID: unique ID for a specific analysis.
    • Analysis Status: current status of the analysis.
    • Actual Start and Actual End: timestamp when the analysis started and finished, whether manually or on a schedule.
    • Scheduled Start and Scheduled End: for a scheduled analysis, the timestamp when it is scheduled to start and finish. These times indicate when the analysis is scheduled to run compared to the times when it actually started and ended.
  4. Optionally, from the Filter by dropdown menu, you can select to show only analyses with a specific status or to include or exclude prescans. Then, select Apply to filter the list.

  5. In the Analysis Occurrence ID column, select a link to close the Analysis History window and open a read-only page with more detailed information about the selected occurrence. From the Analysis Actions dropdown menu, you can select Configure Most Recent Analysis to go to the Edit page for the most recent occurrence of the selected analysis. Any changes to the analysis configuration only apply to future analyses.

  6. To view the historical scan results for the selected analysis, in the URLs List or API Specifications to Scan table, select a URL or specification. The Scan Details page opens with read-only information about the selected scan occurrence. From the Scan Actions dropdown menu, you can select Configure to edit the scan configuration. Any changes to the scan configuration only apply to future scans.

Monitor status

You can view Dynamic Analysis scans in the Veracode Platform to verify status updates. All actions and statuses are available in the activity log located at the bottom of the Dynamic Analysis summary page.

After submitting your analysis, you can return to the list of Dynamic Analysis scans at any time to verify status updates. To find a specific Dynamic Analysis scan, enter the name of a scan and select Find.

Go to the All Dynamic Analysis Scans page and select the Dynamic Analysis you want to edit. Then, on the Dynamic Analysis summary page, select Configure Analysis in the Analysis Actions menu. The data in the analysis summary table automatically refreshes so you do not need to manually refresh the page to see updated information. Edit the configuration details that you want to change and select Save.

Analysis statuses

This table lists all the possible statuses for a Dynamic Analysis.

StatusDescription
Completed - Verifying ResultsDynamic Analysis completed successfully. Veracode is verifying the results, which will be available after the review is complete.
Completed - Verifying Partial ResultsDynamic Analysis completed with partial results because one or more scans failed verification. Veracode is verifying the results, which will be available after the review is complete.
Completed - Partial Results AvailableDynamic Analysis completed with partial results because a user action, a verification failure, a scan duration timeout, or a system error interrupted the scan.
Completed - Results AvailableDynamic Analysis completed successfully. You can now view the results.
In ProgressDynamic Analysis started and is now running.
In Progress + showing a warning iconDynamic Analysis started and is running, but one or more target URLs failed verification.
Not SubmittedA technical issue occurred. Try submitting your Dynamic Analysis again.
PrescanningVeracode is performing a prescan of the URLs to verify connection and authentication settings.
QueuedDynamic Analysis is submitted and waiting for available scan capacity.
ScheduledDynamic Analysis is scheduled.
Stopped - Deleting ResultsA user stopped the Dynamic Analysis and deleted the results.
Stopped - Saving ResultsA user stopped the Dynamic Analysis and saved the results.
Stopped - Scan Duration EndedThe scan duration limit was reached and the scan was stopped. Increase the scan duration if you need more time for your scan to complete.
Stopped - Scan Duration Ended With Partial ResultsThe scan duration limit was reached and the scan was stopped. Veracode now reviews the results and will publish them after the review.
Stopped - Technical IssueAn issue occurred and the Dynamic Analysis is stopped. Contact Veracode Technical Support if the issue continues.
Stopped - Verifying ResultsDynamic Analysis completed as much as possible. You can now view the results.
Stopped - Verifying Partial ResultsDynamic Analysis stopped because of user action, a verification failure, a scan duration limit reaching, or a system error. Veracode is verifying the partial results, which will be available after the review.
Stopped - Partial Results AvailableA user stopped the Dynamic Analysis and produced partial results.
Time Expired - Verifying Partial ResultsThe scan duration limit reached and Dynamic Analysis produced partial results. Veracode is verifying the partial results, which will be available after the review. Increase the scan duration if you need more time for your Dynamic analysis scan to complete.
SubmittedYou successfully submitted the Dynamic Analysis.
All Verifications FailedAll scans failed verification, and the Dynamic Analysis cannot run. Review your scan settings and try again.

You can filter on the specific status of the Dynamic Analysis scans if you want to only see a list of the scans that are in a specific state. In the Filter by Status dropdown menu, select the status on which you want to filter.

You can edit the entire Dynamic Analysis at any time when it has a status of:

  • Scheduled
  • Stopped
  • Published - Results Available
  • Saved for Later

Scan statuses

You can view the status of a specific URL scan or API specification scan in a Dynamic Analysis on the Scan Details tab.

The URL scan status provides additional information about the individual scan associated with the URL, which can differ from the status of the overall analysis. The URL scan status is also displayed in the list of URLs on the Dynamic Analysis Summary page.

URL Scan StatusDescription
Submit FailedVeracode encountered a technical issue and could not scan the URL.
ScheduledThe URL is scheduled to scan.
SubmittedVeracode received your scan request.
In ProgressThe scan has started.
Verification FailedVeracode cannot scan the URL. Review the URL configuration and try again.
Queued with warningThe scan is in the queue because your subscription has no available capacity.
QueuedThe scan is in the queue and ready to start.
Stopping - Saving ResultsA user stopped the scan and saved the results.
Stopping - Deleting ResultsA user stopped the scan and deleted the results.
StoppedThe scan stopped successfully.
Site unreachable - StoppedThe scan stopped because the site became unreachable. Verify that the site is online and has stable network connectivity.
Site unreachable - Verifying ResultsThe scan stopped because the site became unreachable. Verify that the site is online and has stable network connectivity. Veracode is verifying the results, which will be available after the review.
Site unreachable - Results AvailableThe scan stopped because the site became unreachable. Results are available, but coverage may be lower than expected.
Time Expired - StoppedThe scan duration limit was reached and the scan was stopped. Increase the scan duration if you need more time.
Technical Issue - StoppedVeracode encountered a technical issue and could not continue the scan.
Time Expired - Verifying Partial ResultsThe scan duration ended and stopped the scan. Veracode is verifying the partial results, which will be available after the review. Increase the scan duration if you need more time for your scan to complete.
Time Expired - Partial Results AvailableThe scan duration ended and stopped the scan. Partial results are available. Increase the scan duration if you need more time.
PausingThe scan is scheduled to pause automatically.
ResumingThe scan is scheduled to resume automatically.
Stopped - Verifying Partial ResultsA user stopped the scan. Veracode is verifying the results, which will be available after the review.
Stopped - Partial Results AvailableA user stopped the scan. Partial results are available.
Scan Error - Verifying Partial ResultsThe scan stopped unexpectedly. Veracode is verifying the results, which will be available after the review.
Scan Error - Partial Results AvailableThe scan stopped unexpectedly. Partial results are available.
Lockout - Verifying Partial ResultsThe scan engine stopped the scan after repeated failed sign-in attempts. Veracode is verifying the results, which will be available after the review.
Lockout - Partial Results AvailableThe scan engine stopped the scan after repeated failed sign-in attempts.
Completed - Verifying ResultsThe scan completed successfully. Veracode is verifying the results, which will be available after the review.
Completed - Results AvailableThe scan completed successfully. Results are available.
Crawl Script ErrorVeracode could not scan the URL because the crawl script contains errors. Review the crawl script and try again.
Authentication ErrorVeracode could not scan the URL due to authentication errors. Verify the credentials to ensure they are accurate, and review the Selenium login and logout scripts.
Connection ErrorVeracode could not connect to the target URL. Verify that the site is accessible from the internet. If it is not, configure Veracode Internal Scanning Management (ISM).

Notification events

Veracode sends email notifications at significant points during the Dynamic Analysis lifecycle.

This table lists the current Dynamic Analysis prescan notifications. Veracode sends the notifications to either the person who created the Dynamic Analysis scans or the last person who modified a schedule.

EventDescription
The prescan of a Dynamic Analysis succeeded.All URL configurations in your Veracode Dynamic Analysis request passed prescan verification.
The prescan of a Dynamic Analysis failed.The target URL configurations in your Veracode Dynamic Analysis request failed during prescan verification.

This table lists the current post-scan results notification of full Dynamic Analysis scans that Veracode sends to the security leads in your organization. Veracode also sends these notifications to specified internal Veracode users, such as the solution architect, customer success manager, and sales associate.

EventDescription
The results of a Dynamic Analysis are published.The results of a Dynamic Analysis are published and now available.

Delete a scan

You can use the Veracode Platform to delete a Dynamic Analysis scan of a web application or API.

Important

When you delete a scan you permanently remove its scan configuration and all results from any Dynamic Analysis.

You can also delete Dynamic Analysis scans with the REST API.

Before you begin:

  • Confirm your account has the Creator or Security Lead role.
  • Ensure the status of the scan you want to delete is not In Progress. If you see this status, you must wait for the scan to complete.

To complete this task:

  1. In the Veracode Platform, select Scans & Analysis > Dynamic Analysis.
  2. In the All Dynamic Analyses table, select the name of an analysis.
  3. In the URLs List or API Specifications List, locate a scan.
  4. From the Actions menu actions_icon.png, select Delete.
  5. To confirm that you want to delete the scan, in the Delete Scan window, select OK.

Delete an analysis

You can delete a Dynamic Analysis if no instances of the Dynamic Analysis are running. You must have the Creator or Security Lead role to be able to delete a Dynamic Analysis.

To delete a Dynamic Analysis, on the row for the analysis you want to select, select Actions > delete . When prompted, confirm that you want to permanently remove all results and URL configurations for this Dynamic Analysis.