Scan policies

Most of Vulmon Recon reacts to what discovery finds. Policies is where you set the rules it follows before you get involved — what comes into scope on its own, what should never be touched, and when scanning may reach your servers.

Find them under Scan configuration → Policies. Only organization owners and admins can change them; everyone else sees the current settings read-only. Changes apply from that moment on — they never rewrite decisions already made.

Four rules live here: which assets come into scope automatically, which patterns are excluded from scanning entirely, the scan window in which scanning may reach your infrastructure, and how long an accepted risk stays accepted before it comes back for review.