Run your first scan

In Burp Suite Enterprise Edition, you create "sites" to represent any websites or web applications that you want to scan. The first time you run Burp Suite Enterprise Edition, an onboarding wizard helps you to add your first site and then run a scan on it.

Step 1: Select a target for your scan

The first step of the wizard prompts you to select whether you want to scan your own target app or a deliberately-vulnerable test site (https://vulnerable-website.com).

Select an option to display the Add a site page:

• To scan your own site and get "real world" results straight away, click Scan your site.
• To use the test site and see how Burp Suite Enterprise Edition displays vulnerabilities of varying severity, click Set up and scan.

Step 2: Add your first site

The next step of the onboarding wizard prompts you to add your first site.

Start by entering a Site name. This can be anything you like. If you are scanning the test site this field is already populated with Vulnerable Test Site.

Next, enter a Start URL. This is the URL from which all scans of the site start. Any sub-paths of the URL are included in the scope of the scan by default. If you are scanning the test site this field is already populated with https://vulnerable-website.com/.

For the scan configuration, you can choose from four preset modes that enable you to adjust the balance of speed and coverage. For this first scan, select Lightweight. The lightweight mode completes within 15 minutes.

Leave all the other options as their defaults and click Next: Set up scan to display the Schedule scan page.

Step 3: Schedule a scan

You're now presented with scan scheduling options.

By default, scans start immediately and repeat weekly. You can use the Start scan and Scan schedule options to change the scan's start time and frequency if required.

Click Create scan & finish to start the scan and open the Timeline tab.

Step 4: View more details

You can click on the individual scan to view more details. On the Timeline tab, you can monitor the scan progress, and see an estimate of the time remaining. You can also see issues as they're discovered in real time. Use the Issues tab to see more details about an issue, we'll look closer at this tab in the next tutorial once the scan has finished.