🔒 BLACKOUT v1.0 — GTM Security Operations Platform
Guides
Run Your First Scan

Run Your First Scan

This guide walks through manually initiating a scan and interpreting results.


Scan Types

Quick Scan

  • Homepage only
  • ~30 seconds
  • Good for initial assessment

Full Scan

  • Homepage + configured page types
  • ~2-5 minutes
  • Comprehensive coverage

Deep Scan

  • All discovered pages
  • ~10-30 minutes
  • Maximum coverage, higher resource usage

Initiating a Scan

From Console

  1. Navigate to your site in Sites
  2. Click the Scan button
  3. Select scan type
  4. Click Start Scan

From Command Line

# Using the BLACKOUT scanner directly
node scanner.js --url https://example.com --output results.json

What the Scanner Detects

During each scan, BLACKOUT captures:

CategoryWhat's Detected
ScriptsAll JavaScript loaded (first and third-party)
CookiesCookie names, values, domains, expiration
NetworkAll HTTP requests with full request/response data
StoragelocalStorage, sessionStorage, IndexedDB access
ConsentConsent banner interactions and timing

Understanding Results

Detection Structure

{
  "vendor_id": "rb2b",
  "vendor_name": "RB2B",
  "bti_categories": ["visitor_identification", "crm_enrichment"],
  "confidence": 95,
  "evidence": {
    "script_urls": ["https://tag.rb2b.com/..."],
    "cookies_set": ["_rb2b_session"],
    "data_exfil": ["email", "company"]
  }
}

Evidence Fields

  • script_urls: Where the vendor's code loaded from
  • cookies_set: Cookies created by this vendor
  • data_exfil: Data observed leaving to vendor domains
  • piggyback_chain: Other vendors loaded by this vendor

Scan States

StateMeaning
queuedWaiting in scan queue
runningScan in progress
completedScan finished successfully
failedScan encountered an error
⚠️

Scans may fail if the target site blocks headless browsers or requires authentication.


Next Steps