Discuss with expertTry it for free
© 2026 Direct Cursus Technology L.L.C.

Managing endpoint scan schedules in the Vulnerability Management (VM) module

Written by
Updated at November 2, 2026
View in Markdown

With the Vulnerability Management module interface, you can modify endpoint scan schedules, as well as deactivate, reactivate, and delete them.

Note

To edit an endpoint scan schedule, you need the vulnerability-manager.editor role or higher.

Editing an endpoint scan schedule

To edit an endpoint scan schedule:

  1. Go to Yandex Security Deck.

  2. In the left-hand panel, select  Vulnerability management.

  3. At the top of the window, select the correct workspace.

  4. Go to the Scan schedules tab, click in the schedule row, and select Edit. In the window that opens:

    1. In the Target group section, edit the scan settings for the target group:

      • In the Resources field, select:

        • All resources: For the target group to include targets residing within Yandex Cloud resources across the entire Vulnerability Management scope defined in the workspace.

        • Selected resources: To restrict the target discovery scope to specific Yandex Cloud resources.

          Click Select resources to select individual clouds and folders for analysis.

      • In the Addresses field, select:

        • No limit: To scan all possible paths on the discovered endpoints.

        • Ignore addresses: To specify addresses to exclude from scanning.

          The field supports string values containing a partial path or a regular expression, e.g., /api or [?&](token|auth)=([^&]+).

          One field must contain exactly one exclusion. As you type an exclusion into the field, a new field appears automatically for your next exclusion.

    2. Under Scan type, select the correct scan mode:

      • Advanced attack surface analysis: To scan for additional targets that may have been missed during the basic analysis. For more information on this scan mode, see Advanced attack surface analysis.

      • Vulnerability scanning: To perform deep signature scanning and attack testing to detect various types of vulnerabilities and threats. For more information on this scan mode, see Deep vulnerability scanning.

        Optionally, click Advanced module configuration to select specific modules (analysis methods) to apply during deep vulnerability scanning.

    3. Under Launch settings, edit the basic schedule parameters:

      • In the Run field, select how often to run scans under the current schedule:

        • Every 7 days
        • Every 14 days
        • Every 30 days
        • Custom interval in days
      • Change the Schedule name.

    4. Click Save.

Deactivating an endpoint scan schedule

To temporarily pause the execution of an endpoint scan schedule:

  1. Go to Yandex Security Deck.
  2. In the left-hand panel, select  Vulnerability management.
  3. At the top of the window, select the correct workspace.
  4. Go to the Scan schedules tab, click in the schedule's row, and select Deactivate.
  5. In the window that opens, confirm the deactivation of the schedule.

Activating an endpoint scan schedule

To reactivate a paused endpoint scan schedule:

  1. Go to Yandex Security Deck.
  2. In the left-hand panel, select  Vulnerability management.
  3. At the top of the window, select the correct workspace.
  4. Go to the Scan schedules tab, click in the inactive schedule's row, and select Activate.
  5. In the window that opens, confirm the reactivation of the schedule.

Deleting an endpoint scan schedule

To delete an endpoint scan schedule:

  1. Go to Yandex Security Deck.
  2. In the left-hand panel, select  Vulnerability management.
  3. At the top of the window, select the correct workspace.
  4. Go to the Scan schedules tab, click in the schedule's row, and select Delete.
  5. In the window that opens, confirm the deletion of the schedule.

Useful links

Previous
Creating an endpoint scan schedule
Next
Running an endpoint scan schedule