Overview of Authentication

When you use Netsparker to scan a web application that contains some pages with login credentials and configurations, you need to add those details to your Scan Options authentication fields. This is important because it enables the scanner to determine whether it is logged in or logged out during a scan.

For further information, see Netsparker Enterprise Scan Options Fields and Netsparker Standard Scan Options Fields.

Supported Authentication Methods in Netsparker

There are multiple forms of Authentication supported in Netsparker:

• Configuring Form Authentication in Netsparker Enterprise
• Configuring OAuth2 Authentication in Netsparker Standard
• Configuring Header Authentication in Netsparker Standard
• Configuring Basic, NTLM/Kerberos Authentication in Netsparker Standard
• Configuring Form Authentication in Netsparker Standard
• Verifying the Form Authentication Configuration in Netsparker Standard
• Logout Problems
• Interactive Logins in Netsparker Standard