Some websites are hosted behind firewalls or restricted networks, which prevents Website Scanner from accessing them. If this applies to your site, you can use one of the following methods to allow access:
IP Whitelisting
Enterprise plans support dedicated IPs (repeaters) for scans. You can whitelist these IPs in your firewall or access control system.
- This feature is available only on the Enterprise plans.
- After you whitelist the assigned IPs, share your group ID with the BrowserStack support team.
- The team enables IP whitelisting for your account, and Website Scanner starts routing traffic through the dedicated IPs.
Local Testing (For non-enterprise plans)
If you can't whitelist IPs, you can connect your internal or staging sites using BrowserStack Local. For more information, check the Local Testing Configuration guide.
Header Whitelisting (Alternate option for non-enterprise plans)
If you prefer an automated setup, Website Scanner supports adding the `X-Browserstack-Whitelist-Token` header to each request. You can configure your firewall, CDN (like Cloudflare), or reverse proxy to allow requests with this header. Contact BrowserStack Support to enable this feature.
