> ## Documentation Index > Fetch the complete documentation index at: https://pentest-tools.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Scan Robots > Automate multi-tool security testing workflows > [!WARNING] > > On November 3, 2026, six new default robots replaced the previous 12. > > Existing schedules keep running, and robots you created earlier and their scan history stay in your account. You can't create new robots or edit existing ones. > > **Plans:** which robots you see depends on your plan. For example, the Host Scan Robot runs a deep Website Scanner pass, so you see it only if your plan includes deep web scanning. > > [See what's changing](https://pentest-tools.com/change-log?entry=pentest-robots-new) ## What are Scan Robots? Scan Robots are predefined workflows that run multiple security tools in sequence. Each robot defines a series of scans where output from one tool feeds into the next. You choose a target and start the robot, then review the results. Robots can be shared with team members. See [Sharing robots](#sharing-robots) for details. ## Default robots Starting November 3, 2026, these six robots replace the previous default robots: | Robot | Targets | Configuration | | - | - | - | | **Domain Recon Robot** | Hostname or URL | Runs Domain Finder and a deep Subdomain Finder scan in parallel. | | **Host Recon Robot** | Hostname, IP, or URL | TCP Port Scanner runs in deep mode (the 3,845 most common TCP ports). UDP Port Scanner checks the 100 most common ports. Virtual Hosts Finder runs on the target. Network Scanner checks the TCP results with the version-based engine only. | | **Host Scan Robot** | Hostname, IP, or URL | TCP Port Scanner runs in deep mode (the 3,845 most common TCP ports); UDP Port Scanner checks the 100 most common ports. Network Scanner checks discovered TCP ports with OpenVAS, Sniper, version-based, and Nuclei engines. Password Auditor checks discovered services. Website Scanner runs in deep mode on services whose name contains `http`. | | **Host Scan & Exploit Robot** | Hostname, IP, or URL | Uses the Host Scan configuration, then runs Sniper Auto-Exploiter on the custom-port results from Password Auditor. | | **App Recon Robot** | URL | Runs URL Fuzzer in light mode, Website Recon, and People Hunter in parallel. | | **App Scan Robot** | URL | Website Scanner runs in deep mode and follows redirects. If it identifies WordPress or Drupal, the matching CMS scanner runs in deep mode and follows redirects. If it finds a login interface, Password Auditor checks the extracted HTTP URLs. URL Fuzzer runs in deep mode. Network Scanner runs with OpenVAS, Sniper, version-based, and Nuclei engines. | ### Robot workflows ![Domain Recon Robot workflow](https://mintcdn.com/pentest-toolscom-34533c73/adHH9iZtD_Nfp4VP/images/robots/domain-recon-robot.png?fit=max\&auto=format\&n=adHH9iZtD_Nfp4VP\&q=85\&s=d16c2976f6441844d73c890ac6eab4fd) ![Host Recon Robot workflow](https://mintcdn.com/pentest-toolscom-34533c73/adHH9iZtD_Nfp4VP/images/robots/host-recon-robot.png?fit=max\&auto=format\&n=adHH9iZtD_Nfp4VP\&q=85\&s=e9b6c3a6a722c036ba8f4785b12ef0d4) ![Host Scan Robot workflow](https://mintcdn.com/pentest-toolscom-34533c73/adHH9iZtD_Nfp4VP/images/robots/host-scan-robot.png?fit=max\&auto=format\&n=adHH9iZtD_Nfp4VP\&q=85\&s=4519b01833863657e102cb435c708602) ![Host Scan & Exploit Robot workflow](https://mintcdn.com/pentest-toolscom-34533c73/adHH9iZtD_Nfp4VP/images/robots/host-scan-and-exploit-robot.png?fit=max\&auto=format\&n=adHH9iZtD_Nfp4VP\&q=85\&s=4ceacda75bb2efa0881b0ba290401d66) ![App Recon Robot workflow](https://mintcdn.com/pentest-toolscom-34533c73/adHH9iZtD_Nfp4VP/images/robots/app-recon-robot.png?fit=max\&auto=format\&n=adHH9iZtD_Nfp4VP\&q=85\&s=17bb40e54706460119b4aec490914da7) ![App Scan Robot workflow](https://mintcdn.com/pentest-toolscom-34533c73/adHH9iZtD_Nfp4VP/images/robots/app-scan-robot.png?fit=max\&auto=format\&n=adHH9iZtD_Nfp4VP\&q=85\&s=7a1f9b0885e1ddf16870ecd6751ac564) ## Running a robot **1. Navigate to Robots** Go to **Automation > Robots** in the main navigation. **2. Select a robot** Click on a robot to view its description and workflow. **3. Start a new scan** Click **New scan** and select the target you want to scan. Each robot works on one target per run. **4. Configure and run** Review the configuration and start the robot. ## Scheduling robots Robots can run on a schedule: **1. Start a new scan** Click **New scan** on any robot. **2. Enable scheduling** Toggle the scheduling option and configure: * **Frequency**: how often the robot should run (once, daily, weekly, monthly, quarterly, yearly) * **Start date**: when to begin the schedule **3. Save schedule** The robot will run automatically at the configured intervals. > [!NOTE] > > Scheduled robot scans appear in your [Scheduled Scans](https://pentest-tools.com/docs/core/scans/scheduled-scans.md) list, where you can manage, disable, or delete them. ## Managing robots ### Viewing robot details Click on any robot to see: * Description of what the robot does * The workflow and tools it uses * Available actions depend on your permissions. ### Editing robots You can't create new robots or edit existing ones. Robots you created earlier stay in your account with their scan history. ### Deleting robots Deleting a robot removes the robot configuration. Past scan runs are not deleted. They remain on the Scans page but show "\[Robot deleted]" as their name. To remove a past run, delete it from the Scans page. ## Robot execution Tools run in the order the workflow defines, and some steps run in parallel. Some robots include filters that control which results trigger subsequent steps. ### Node types The workflow diagram has four node types: * **Tool** runs one or more scans. Shows status and finding counts as work progresses. * **Filter** tests conditions against each result from the previous tool. Only matching results move to the next step. The node shows how many results passed through. * **Extractor** pulls new targets out of a tool's results to feed the next tool. For example, it might pull hostnames from Subdomain Finder results, or build URLs from a port scan's list of open HTTP ports. * **Reducer** works like an extractor, but processes all scan results together before producing targets. Its primary use is deduplication: when Subdomain Finder returns multiple subdomains that resolve to the same IP, a reducer picks one hostname per IP to avoid scanning the same server twice. ### Monitoring progress The scan result page shows the robot workflow as an interactive diagram. Each node updates as the robot runs. Tool nodes show the tool name, a status indicator, and finding counts by severity. When scans start for that step, a "X / Y Finished Scans" button appears. Click it to open a panel listing each individual scan with its target, status, and finding summary. From that panel, click any scan to open its full result in a new tab. Scans that failed to start appear in the same panel with their error message. You can pan the diagram by clicking and dragging. Use the + and − buttons to zoom. ### Results When the robot finishes, the diagram shows the final state with finding counts at each tool step. To see findings in detail, click the Finished Scans button on any tool node to open individual scans from that step. ## Scans and reports Each robot run appears as a single entry on the Scans page. The individual tool scans that run in the background are hidden from the list. When all tools finish and you have email notifications configured, you get one email notification with an aggregated PDF report attached. The report is also saved to the Reports page. Configure notification rules on the [Notifications](https://pentest-tools.com/docs/capabilities/notifications.md) page. Deleting a robot run from the Scans page removes the entire run and all its child scans. No warning is shown before this happens. ## Example use cases | Goal | Robot to use | | - | - | | Map a domain's subdomains | Domain Recon Robot | | Check a host's open ports and services | Host Recon Robot | | Assess a host and its web services | Host Scan Robot | | Confirm exploitability of supported network-service CVEs on a host | Host Scan & Exploit Robot | | Review an app's exposed URLs and public information | App Recon Robot | | Scan an app and check for common CMS vulnerabilities | App Scan Robot | ## Sharing robots You can share robots with team members. Shared robots appear alongside default robots so they can run them on their own targets. ### Permission levels | Permission | What they can do | | - | - | | **No access** | Cannot see or use your robots | | **View** | Can view and run robots, but not edit or delete | | **Edit** | Full access to view, run, edit, and delete robots. After November 3, 2026, edit permission doesn't allow changes to a robot. | ### How to share robots 1. Go to **Team** in the sidebar 2. Select the team members you want to configure sharing for 3. Click **Share** 4. Set the **Robots** permission level 5. Click **Save** For more on team management and sharing, see [Teams and roles](https://pentest-tools.com/docs/capabilities/teams-and-roles.md). ## Best practices > [accordion] Start with default robots > > Start with Domain Recon Robot on a domain you own, review what it discovers, and choose which hosts need deeper testing. > [accordion] Watch your scanned assets quota > > Each robot works on one target per run, and each unique target you scan counts against your [scanned assets limit](https://pentest-tools.com/docs/account-billing/plans-and-limits/assets-and-limits.md). After a recon robot lists subdomains, choose which ones to scan. > [accordion] Use scheduling for monitoring > > Set up recurring robot runs to repeat the same checks on a schedule. > [accordion] Test on non-production first > > Verify robot behavior on test assets before running against production systems. > [accordion] Share robots with your team > > Share robots with your team so everyone tests the same way. ## Related topics * [Scheduled scans](https://pentest-tools.com/docs/core/scans/scheduled-scans.md) * [Scan groups](https://pentest-tools.com/docs/core/scans/scan-groups.md) * [Scan types and depth](https://pentest-tools.com/docs/core/scans/scan-types-and-depth.md) * [Assets and limits](https://pentest-tools.com/docs/account-billing/plans-and-limits/assets-and-limits.md) * [Attack surface](https://pentest-tools.com/docs/capabilities/attack-surface.md) * [Teams and roles](https://pentest-tools.com/docs/capabilities/teams-and-roles.md) This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.