1
Create an account and project
The customer adds the account, domain, platform and commercial journey so the scan starts with the right target and business context.
- Account and role context
- Domain and platform details
- Checkout, signup, pricing or lead flow
2
Authorize scope before scanning
Before a scan starts, WebRiskOps confirms that the target is owned or explicitly authorized and that the requested paths are safe to check.
- Customer authority
- Allowed public and private paths
- Blocked unsupported scope
3
Choose a scan, monitoring or fix path
Package selection happens after sign-in so limits, monitoring cadence, credits and checkout availability match the actual project.
- Scan Plan eligibility
- Monitoring and fix credit state
- Payment-unavailable fallback
4
Set crawler limits and checks
The project defines page limits, check categories, include/exclude paths, expected runtime and what evidence the report can show.
- Page and crawl limits
- Enabled check categories
- Screenshot, HTML and header evidence
5
Run repeatable scanner work
The scanner runs through visible queued, running, completed, failed or blocked states, with retry guidance when work cannot finish.
- Queue and progress state
- Retry guidance
- Blocked or failed reasons
6
Capture evidence artifacts
Evidence is saved as pages, screenshots, HTML snapshots, response headers, browser observations and repeatable issue fingerprints.
- Screenshots and HTML snapshots
- Headers and browser observations
- Repeatable issue fingerprints
7
Generate a private risk report
Reports explain score, findings, affected pages, available evidence and next actions, and stay private until publish gates pass.
- Executive summary
- Evidence and quality gates
- Public, print and PDF readiness
8
Create automated fix workflow
Eligible findings move into generated fix tasks, ticket-only instructions, scoped access requests or retest plans after credit and safety checks.
- Selected findings
- Fix credit gate
- Ticket-only fallback
9
Retest and compare outcomes
Retests compare before and after evidence, update task state, record remaining risk and keep inconclusive outcomes visible.
- Before and after evidence
- Passed, failed or inconclusive state
- Remaining risk notes
10
Enable monitoring and alerts
Monitoring turns the baseline scan into recurring checks, issue history, alert routing and plan-aware report refreshes.
- Frequency and next run
- New, fixed, and recurring issues
- Alert routing
11
Explain blocked and failed states
Payment pending, insufficient credits, unsupported scope, scanner failures, report quality blocks and missing access all explain the next safe action.
- Payment or credit gate
- Scanner and report blocks
- Retry or request routing
12
Clarify customer responsibilities
Customers provide authorization, accurate project scope, plan/payment readiness and any optional remediation access needed for selected workflows.
- Authorized target
- Accurate intake
- Optional scoped access for fixes