
DSmith486625 (Community Member) asked a question.
I have a website that requires a Dynamic Analysis. Users are required to login to access the website (a 401 response is sent for any unauthenticated request). If I run a dynamic analysis against the site without providing Veracode with login credentials, is this scan considered valid? Or are we required to allow Veracode to authenticate?
.png)
Hello @DSmith486625 (Community Member) ,
Thank you for reaching out to the Community.
If your website requires authentication, you must provide the necessary
credentials with your Dynamic Analysis so Veracode can log in to the
application.
There are several ways to authenticate credentials. I have
provided a link that will assist you.
https://docs.veracode.com/r/t_was_login_creds
Kind regards,
Steven
Veracode Support Engineer