Coverage
How much of a target a scan reached, and how depth buys recall.
Coverage is the share of a target's routes a scan reached: endpoints probed over endpoints total. The dashboard reports it as a single figure across the workspace, and the asset picker shows the route count of the asset you are about to scan.
Depth
Depth decides how many passes the agent makes.
- Standard — two passes, 1× credits. A regression check on a surface that has been scanned before.
- Deep — three passes, 1.5× credits, and the default. Worth it for a first scan, a release you care about, or a surface that changed shape.
What was tested
Findings carry an OWASP WSTG test id. Filter the findings list by Weakness to see everything classified under one test, or read Most common weaknesses on the dashboard for the ranking across the workspace. Two engines reporting the same weakness collapse into one entry.
What coverage is not
Coverage counts routes the scan reached. It is not a statement that the rest of the application is safe, and a route that was reached and reported nothing is not thereby proven clean.
