Monitoring scan progress - Port Swigger
Summary: PortSwigger's documentation describes the Timeline tab in Burp Scanner, which shows a scan's current stage and the time remaining, with that estimate depending on factors including the chosen scan configuration. For web app scans, Burp Scanner runs the crawl and audit phases at the same time, while the crawl phase is not required for API scans, and the timeline for completed scans shows error messages with the cause and possible remedies.
What's compelling: The time-remaining figure is only an estimate tied to your scan configuration, and the crawl phase that web app scans run alongside the audit has no equivalent in API scans - so scan windows planned around one target type may not hold for the other.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026