Scans - CG Scanning API V2

Product Context Awareness

All resources in the Scanning API (such as scans, targets, schedules, and reports) are product-specific.

Before creating, updating, or querying any resource, ensure that the correct product is currently active.

Always switch to the appropriate product using the Change User Product endpoint before interacting with product-specific resources.

A Scan represents a security assessment execution performed against one or more targets using a specific scanning product and configuration.

It is the core object of the scanning platform and acts as the orchestration layer that ties together:

What is scanned (targets)

How it is scanned (scan profile)

When it is scanned (manual or scheduled execution)

Which product performs the assessment (PCI, VRMS, Penetration, etc.)

A scan transitions through multiple lifecycle states (e.g. created, running, completed, failed) and produces results and reports that reflect the security posture of the scanned assets at a specific point in time.