Troubleshooting

Can't find your issue? Check the specific integration or scanner troubleshooting pages.

#Authentication Errors

#401 Unauthorized

Your API key is missing or invalid. Make sure:

• You're using the full key (pk_...)
• It's in the Authorization: Bearer header
• The key hasn't been revoked in Settings

#403 Forbidden

You're authenticated but don't have permission. Common causes:

• Your plan doesn't include this feature (e.g., active scanning on free plan)
• You're trying to access another user's scan
• Email verification required — check your inbox

#Billing Errors

#Checkout fails or never completes

Polar checkout handles payment. If it fails:

• Check your card details (Polar is the merchant, not Vergate)
• Ensure your country is supported by Polar
• Try a different card or payment method

#Subscription shows as inactive

After checkout, Polar sends a webhook to activate your plan. This usually happens within seconds but can take up to 2 minutes. If it persists:

• Check if the webhook was received (check backend logs)
• Contact support with your Polar order ID

#General Issues

#Scans are slow

Passive scans should take 3-5 seconds. If slower:

• Your site might be behind a WAF that's throttling requests
• The target server might be slow to respond
• Try with a simpler URL first (homepage, not a deep path)

#No findings returned

The scan completed but found no issues — that's good! But if you expected findings:

• Check the scan status (might still be running)
• Some findings require the crawler to discover specific endpoints
• Try an active scan for deeper analysis

#CORS errors in browser

If you're calling the API from a browser and getting CORS errors:

• Make sure your origin is in CORS_ORIGINS
• The API supports Authorization and X-API-Key headers
• For local dev with HTTPS (Polar checkout requires it): frontend on https://localhost:3000 (run npm run dev:https) and backend on https://localhost:8000 (run vergate serve --ssl-keyfile frontend/certificates/localhost-key.pem --ssl-certfile frontend/certificates/localhost.pem)