---
title: "Audits"
description: "How Auditor scans your assets, and where to see the results of each scan."
url: https://whitespots.io/docs/appsec-portal/find-vulnerabilities/audits
slug: appsec-portal/find-vulnerabilities/audits
publish_date: 2026-10-30T19:42:15.000Z
last_modified: 2026-10-30T19:42:15.000Z
---

# Audits

An audit is one scan of one or more assets. Portal asks
[Auditor](https://whitespots.io/docs/appsec-portal/get-started/install-the-auditor) to run a
[sequence](https://whitespots.io/docs/appsec-portal/find-vulnerabilities/audits/sequences) of jobs on each asset: download the code or pull the image, run the
scanners, and send each scanner's report back. The findings of all the reports are counted under
the audit.

Audits start in several ways:

- by hand, for a few assets or products: see [Run an audit](https://whitespots.io/docs/appsec-portal/find-vulnerabilities/audits/run-an-audit);
- on a schedule: see [Schedule audits](https://whitespots.io/docs/appsec-portal/find-vulnerabilities/audits/run-an-audit#schedule-audits);
- on every push to a repository, from the
  [version control](https://whitespots.io/docs/appsec-portal/integrations/version-control) webhook;
- on every new image in a [container registry](https://whitespots.io/docs/appsec-portal/integrations/container-registries).

Reports sent over the API or uploaded with an asset also create an audit, so you see them in the
same list. See [Import scan results](https://whitespots.io/docs/appsec-portal/find-vulnerabilities/import-scan-results).

## See the audits

**Audits** in the sidebar lists all audits: when each one ran, its products, assets, scanners and
pipelines. Each scanner shows how many findings it added and resolved; click a number to open those
findings. The same list is on each product's **Audits** page, at the bottom of each asset's page
and on each scanner's page.

Open an audit to see its products and scanners. The **Auditor** pipelines of the audit
show each job's status and logs: open them when an audit finishes without findings you expected.

Audits need a license that includes Auditor: an Auditor license or a paid
one. See [License](https://whitespots.io/docs/appsec-portal/administration/license).

---

## Navigation

- Location: [Docs](https://whitespots.io/docs) > [Application Security Portal](https://whitespots.io/docs/appsec-portal) > [Find vulnerabilities](https://whitespots.io/docs/appsec-portal/find-vulnerabilities)
- Previous: [Find vulnerabilities](https://whitespots.io/docs/appsec-portal/find-vulnerabilities)
- Next: [Run an audit](https://whitespots.io/docs/appsec-portal/find-vulnerabilities/audits/run-an-audit)

### Pages in this section

- [Run an audit](https://whitespots.io/docs/appsec-portal/find-vulnerabilities/audits/run-an-audit)
- [Sequences and jobs](https://whitespots.io/docs/appsec-portal/find-vulnerabilities/audits/sequences)