Scheduling an assessment

Select the time zone to apply to the assessment scheduling.

By default, the assessment is permitted to run during all hours of each day of the week. Using the color key for guidance, you have the option to restrict the assessment from running during specified blocks of time.

To restrict the assessment from running on a particular day (all hours), click the day to select all hours in the day at once. To restrict the schedule from running during specific blocks of time on certain days, click and drag as many hour slots as necessary. To remove any selected restrictions, click and drag your selections again to revert them.

The following screenshot outlines the hours during which the assessment is not permitted to run:

In the calendars, select the dates on which the assessment will run. Days of the week you entirely restricted in Step 2 are grayed out. To clear a selection, click Reset at the bottom of the calendar.

Enter the IP addresses to perform the assessment on (in the IPs Included text box) and any IP addresses to exclude from all testing (in the IPs Excluded text box).

Clicking Import organization IPs automatically populates relevant IP addresses configured in the organization profile. Refer to Manage IPs in Creating and managing organizations.

Provide single IP addresses or network ranges in CIDR notation or range format (for example, 192.168.1.0/32 OR 192.168.1.1-5). Separate IP addresses/ranges with commas or new lines. You may also specify domain names without the protocol or any URL paths.

NOTE  Domains and sub-domains provided in the organization’s profile are used only for OSINT and not automatically included in this scope unless explicitly added.

The Settings step appears only if you have enabled basic settings or both basic and advanced settings. Refer to Enabling or disabling basic or advanced assessment settings.

If both basic settings and advanced settings are enabled, this step displays both the Basic Settings and Advanced Settings sections. These sections reflect the settings configured on the Basic Assessment Settings and Advanced Assessment Settings sections on the Global Settings page.

If advanced settings are not enabled, only the Basic Settings section is displayed.

You can edit the settings in this step on a per-assessment basis, which will not affect the default global settings.

For details on these settings, refer to Configuring global settings.

In this step, you can opt to send notifications to specific recipients as the assessment progresses.

From the drop-down menus, select any number of users in the account to send the notifications to. To send notifications to users outside of the account, click Add non-registered emails and manually enter their email addresses.

The following types of notifications are available to configure recipients for:

• Assessment Activities: When each phase of the assessment kicks off and completes (for example discovery, enumeration, exploitation, and so forth), selected users will receive an email notification.
• New Report Finding Added: When a new pentest finding gets added or removed from your assessment, selected users will receive an email notification of the finding in real-time along with the severity ranking and additional info.
• Vulnerability Count Changes: When new vulnerabilities are imported into your assessment, selected users will receive an email notification with a link to track the assessment.
• Assessment Summary: An assessment confirmation email that includes a summary of everything you selected and provided for this assessment will be sent to the selected users.

Review the legal and technical conditions outlined in this step, and select each checkbox to confirm acknowledgment. Selecting each checkbox is required to proceed.

Review the finalized summary of the options you've configured for the scheduled assessment.