Rerun a scan
Create a new scan with the same configuration as the specified scan. The new scan is a full pentest. In the background, a separate retest scan also verifies the open issues of the specified scan, in its own sandbox and with its own agent, so the full pentest does not know the old issues. An open issue that the retest scan does not reproduce is set to fixed. Read the retest scan through GET /scans/{scanId}/retests on the specified scan. A retest scan cannot be rerun and returns 409 with code RETEST_RERUN_UNSUPPORTED; retest the issue with POST /vulnerabilities/{vulnerabilityId}/retest instead. For retry-safe at-most-once creation, send an Idempotency-Key and reuse the exact same key and request after a lost or ambiguous response. The key is optional for backward compatibility, retained for 24 hours, and cannot be reused with a different actor, operation, or source scan. A terminal response is replayed only after the caller still passes current source-scan authorization; revoked access returns a fresh 403/404 without exposing the receipt. Use a new key only for a deliberate new rerun.
Authorizations
API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.
Headers
Opaque caller-generated key for at-most-once billable scan creation; use a high-entropy value such as a UUID. Reuse the exact same key only when retrying the exact same request. Completed keys are retained for at least 24 hours; an unfinished accepted worker receipt may be held longer until its downstream queue horizon is safely reconciled. A completed failure is terminal for that key. Keyed terminal responses echo Idempotency-Key and set Idempotency-Replayed to true only when returning a stored outcome.
1 - 200^[A-Za-z0-9][A-Za-z0-9._:/=-]{0,199}$Path Parameters
UUID of the scan. Use the id field of a scan from listScans.
Response
Rerun scan created.
pending, running, completed, failed, cancelled The retest of the open issues of the specified scan that starts in the background. total counts the open issues, and accepted counts the issues that the retest verifies. The value is null when the retest could not be queued. The new scan runs in both cases. Absent when the response replays a rerun that was accepted before this field existed.