{{define "title"}}Scan Settings - {{.Asset.Name}} - XPFarm{{end}} {{template "layout.html" .}} {{define "content"}}
Configure the pipeline stages, tool selections, and scan speeds.
Standard initialization always runs. Normalizes targets and checks if they are alive.
Find subdomains using Subfinder.
If disabled, newly found subdomains are added to the database but excluded from the rest of THIS scan pipeline run.
Discover open ports using Naabu & Nmap.
Probe HTTP components and detect tech stacks.
Lookup CVEs and run Nuclei templates.
Note: Advanced custom Nuclei template selection is configured under the 'Advanced Templates' section of the Asset page.
AI Intelligence Enrichment
Free. Fetches 30-day exploit probability for all found CVEs.
Requires VULNCHECK_API_KEY in Settings. Community tier is free.
Requires GREYNOISE_API_KEY. Skips RIOT/honeypot IPs before scanning.
Requires OPENAI_API_KEY or ANTHROPIC_API_KEY. ~$0.002/screenshot.