Using Tenty day to day

Once an app is connected, Tenty keeps looking at it from the outside and shows what it finds.

When scans run

• Scan now: press Scan on the app page. A verified app can be scanned about once an hour, and the page tells you the next possible time.
• After each deploy: your deploy calls a URL and Tenty scans shortly after. See Tenty hooks.
• On a schedule: plans with nightly scans get a scan every night. Other plans get a scheduled scan on a longer interval, and a scan you start yourself counts for the schedule.

The scan is calm by design. Tenty sends its requests one at a time at a slow pace, and a full scan takes a few minutes.

What a scan sends

Every request carries the user agent TentyScanner/1.0 (+https://tenty.dev/toolset). The Check logs tab lists each scan of your app with every request Tenty made, so you can see everything it did. The tab keeps the logs for the number of days set on the Settings tab, up to the limit of your plan.

The light

• Red: at least one critical or high finding is open
• Yellow: medium findings are open
• Green: Tenty read the app and found nothing that needs action
• Grey: Tenty could not read the app or part of it, and says why

Grey is shown as grey, because a page Tenty could not read is an open question.

Findings

Each finding shows its severity, the evidence Tenty saw, a command that reproduces it and the fix. On a verified app every finding kind also has a fix prompt you can paste into your coding assistant.

For each finding you can:

• Set aside when you decided it is fine, with a reason. Tenty keeps the decision and lists it under set aside.
• Accept the risk until a date you choose. The finding returns when the date passes.
• Report a wrong result when you believe Tenty is mistaken. A person reads every report and answers.

Findings that disappear from the app close on the next scan, and the history keeps them.

Browser mode

With browser mode Tenty opens your app in a real browser during the full check, so scripts and data that load after the page opens are read too. Switch it on in the app settings. Browser mode comes with paid plans.

Notifications

Tenty emails you when something needs you: the door is closed to the scanner, a domain proof is gone, or a critical finding is new.

Removing an app

Remove an app from its Settings tab. The scans, findings and logs of that app are deleted.