Scanners ruleset

clearplane-scanners recognizes known automated scanner identifiers in request headers. These signatures identify tool names; a client can change or omit its user agent. This ruleset does not establish whether an unidentified client is human.

Paranoia levels and compatibility

Start at paranoia level 1 and review monitoring tools and authorized vulnerability scanners. Scope any exception to the authorized route or client policy. The scoped application profiles do not disable scanner detection.

Start in Detection, review detections, and configure only the exclusions needed for the affected route and field.

See the measured coverage for the exact tested payload hashes, missed detections and false-positive rates. Ruleset operation explains activation, stages and rollback.