Scan adaptation during scan execution

1. A system, comprising:

a scan execution engine configured to execute a present scan of a web application hosted on a web host; and

a scan adaptation engine configured to adapt, during execution of the present scan, a subsequent scan portion of the web application for later execution based on a scan metric received from a monitoring agent that monitors the web application, the web host, or both,

wherein the present scan includes a plurality of scan requests and wherein the subsequent scan portion of the web application includes adding at least another scan request to the plurality of scan requests.

2. The system of claim 1 , wherein the scan adaptation engine is further configured to correlate the scan metric to a particular scan request; and

wherein the scan adaptation engine is configured to adapt, as the subsequent scan portion of the web application, a subsequent scan request generated based on the particular scan request.

3. The system of claim 1 , wherein the scan metric indicates the web application references a particular library;

wherein the scan adaptation engine is further configured to correlate the web application reference to the particular library to a particular scan request; and

wherein the scan adaptation engine is configured to adapt the subsequent scan portion of the web application during execution of the present scan by switching from a multi-threaded execution mode to single-threaded execution mode for performing the subsequent scan portion of the web application, wherein the subsequent scan portion of the web application includes a subsequent scan request generated based on the particular scan request.

4. The system of claim 1 , wherein the scan metric indicates the web application invokes a particular technology;

wherein the scan adaptation engine is further configured to correlate the web application invoking the particular technology to a particular scan request;

wherein the scan adaptation engine is configured to adapt the subsequent scan portion of the web application by retaining the subsequent scan portion of the web application as part of the present scan, wherein the subsequent scan portion of the web application includes a subsequent scan request generated based on the particular scan request and is designed to test the particular technology; and

wherein the scan adaptation engine is further configured to remove a different scan portion of the web application that has yet to be executed as part of the present scan, wherein the different scan portion includes another subsequent scan request generated based on the particular scan request but is designed to test another technology different from the particular technology.

5. The system of claim 1 , wherein the scan metric indicates the web application invokes a particular technology;

wherein the scan adaptation engine is further configured to correlate the web application invoking the particular technology to a particular scan request;

wherein the scan adaptation engine is configured to adapt the subsequent scan portion of the web application by retaining the subsequent scan portion of the web application as part of the present scan, wherein the subsequent scan portion of the web application includes a subsequent scan request generated based on the particular scan request and is designed to test the particular technology; and

wherein the scan adaptation engine is further configured to remove a different scan portion of the web application from the present scan that has yet to be executed as part of the present scan, wherein the different scan portion is designed to test the particular technology but does not include any subsequent scan request generated based on the particular scan request.

6. The system of claim 1 , wherein the scan metric indicates the web host exceeds a resource usage threshold; and

wherein the scan adaptation engine is configured to adapt the subsequent scan portion of the web application during execution of the present scan by reducing a scan request rate for performing the subsequent scan portion of the web application.

7. The system of claim 1 , wherein the scan metric indicates the web host exceeds a resource usage threshold; and

wherein the scan adaptation engine is configured to adapt the subsequent scan portion of the web application during execution of the present scan by reducing a number of execution threads of the present scan for performing the subsequent scan portion of the web application.

8. A method implemented by a physical processing resource executing computer-readable instructions, the method comprising:

executing a present scan of a web application hosted on a web host; and

while executing the present scan:

receiving a scan metric measured during the present scan by a monitoring agent that monitors the web application, the web host, or both;

correlating the scan metric measured by the monitoring agent to a particular scan request of a plurality of scan requests of the present scan; and

adapting, based on the scan metric, a subsequent scan portion of the web application of the present scan that has yet to be executed as part of the present scan, the subsequent scan portion of the web application including adding a subsequent scan request generated based on the particular scan request.

9. The method of claim 8 , wherein the scan metric indicates the web application references a particular library;

wherein correlating the scan metric comprises correlating the web application reference to the particular library to the particular scan request; and

wherein adapting the subsequent scan portion of the web application comprises switching from a multi-threaded execution mode to a single-threaded execution mode for performing the subsequent scan portion of the web application.

10. The method of claim 8 , wherein the scan metric indicates the web application invokes a particular technology; and

wherein correlating the scan metric comprises correlating the web application invocation of the particular technology to the particular scan metric; and

wherein adapting the subsequent scan portion of the web application comprises removing the subsequent scan portion of the web application from the present scan because the subsequent scan portion of the present scan is designed to test another technology different from the particular technology.

11. The method of claim 8 , wherein the scan metric indicates the web application does not invoke a particular technology;

wherein correlating scan metric comprises correlating the web application not invoking the particular technology to the particular scan request; and

wherein adapting the subsequent scan portion of the web application, comprises removing the subsequent scan portion of the web application from the present scan because the subsequent scan portion of the present scan is designed to test the particular technology.

12. The method of claim 8 , wherein the scan metric indicates the web host exceeds a resource usage threshold;

wherein adapting the subsequent scan portion of the web application comprises reducing a number of execution threads of the present scan for performing the subsequent scan portion of the web application.

13. A non-transitory machine-readable medium comprising instructions executable by a physical processing resource to:

execute a present scan of a web application hosted on a web host; and

during execution of the present scan:

receive a scan metric from a monitoring agent that monitors the web application, the web host, or both, wherein the scan metric is correlated to a particular scan request of a plurality of scan requests previously sent as part of the present scan;

adapt, based on the received scan metric, a scan parameter for adding a subsequent scan request generated based on the particular scan request; and

after adaptation of the scan parameter, send the subsequent scan request to the web application as part of the present scan.

14. The non-transitory machine-readable medium of claim 13 , wherein the scan parameter comprises a scan thread parameter that is set to a multi-threaded execution mode prior to execution of the present scan; and

wherein the instructions are executable by the physical processing resource to:

adapt the scan parameter by setting the scan thread parameter to a single-threaded execution mode for sending the subsequent scan request; and

send the subsequent scan request in a single-threaded execution mode instead of the multi-threaded execution mode as was configured prior to execution of the present scan.

15. The non-transitory machine-readable medium of claim 14 , wherein the instructions are further executable by the physical processing resource to, after sending the subsequent scan request in the single-threaded execution mode, reset the scan thread parameter back to the multi-threaded execution mode prior to sending a different scan request also part of the present scan.

16. The system of claim 1 , wherein the subsequent scan portion of the web application further includes removing at least one of the scan requests from the plurality of scan requests.

17. The method of claim 8 , wherein the subsequent scan portion of the web application further includes removing at least one scan requests from the plurality of scan requests of the present scan.

18. The non-transitory machine-readable medium of claim 13 , wherein the instructions are further executable by the physical processing resource to remove at least one of the scan requests from the plurality of scan requests previously sent as part of the present scan.

19. The system of claim 1 , wherein the subsequent scan portion of the web application is executed during the present scan.

20. The method of claim 8 , wherein the subsequent scan portion of the web application is executed during the present scan.