Scan Options

Jsmon provides several advanced options to customize your scans. Access them by clicking the Options (Depth, Headers, Extensions) button on the Scans page.

​

File Extensions

Choose which file types to include in your scan. The default extensions are: .html .php .txt .xml .json .map .xhtml .aspx You can add custom extensions by typing them into the extensions field. This is useful for targeting specific file types relevant to your assessment.

​

URL Extraction Depth

Set the crawl depth to control how deep Jsmon follows links during scanning. The depth ranges from 1 to 4 levels: Higher depth values discover more content but consume more credits and take longer to complete.

​

WAF Bypass

Enable the WAF Bypass toggle to use techniques that help scan targets protected by Web Application Firewalls. When enabled, Jsmon attempts to bypass common WAF protections to reach the underlying content.

​

Keywords

Add keywords to filter and prioritize your scan results. Click Add Keywords to enter terms that are relevant to your assessment. Results matching your keywords will be highlighted or prioritized in the output.

​

Custom Headers

Add custom HTTP headers to your scan requests. This is useful for:

• Authentication — Add Authorization headers to scan authenticated areas
• API Keys — Include API key headers required by the target
• Custom Tokens — Add any custom headers needed for access

To add a header:

1. Enter the Key (header name) in the left field
2. Enter the Value in the right field
3. Click Add to include it

You can add multiple headers. Use All Headers to view and manage all configured headers.