Skip to main content
Names, IPs and URLs that turned up outside the project scope are recorded on the Out of scope page rather than acted on. They were seen, never probed.
Out-of-scope observations, logged not probed

Out-of-scope observations, logged not probed

For each one you can add it to scope (the next run then includes it), log it as an observation for the client, or ignore it. Logged observations can be included in the report builder, so the client sees what was noticed at the edge of the engagement.