Before you request a retest
Retests are available on the hosted platform for completed White-box Pentests with triage finished and at least one reported finding. You need a Member role or higher to request one. Viewers can read the results.Request a retest
1
Open the completed scan
In Whitebox Scans, open the scan and click Request retest.
2
Define details
Choose the branch containing your fixes for each repository. To add commit
SHAs under Commits, press Enter after each one. This is optional.Optionally, add Deployment URLs and a Summary of fixes to help
the team check your changes.For uploaded code, describe the changes in the summary; you cannot
attach a replacement archive.
3
Review findings
Findings marked False positive or Accepted risk are excluded.
Check the list and update any statuses before submitting.
4
Confirm the request
Click Request retest. The scan shows Retest pending while the
team checks your fixes.
Request limits
- Up to 50 commit SHAs per repository
- Up to 20 deployment URLs
- Up to 10,000 characters in the summary of fixes
Read the results
When the scan shows Retested, open Retest result for verification notes and the outcome of each finding:
You’ll also get an email if notifications are enabled.
After the retest, a new report is added with fix notes showing which findings
were fixed.