UrlScan
Important
Some information in this article relates to a prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
UrlScan.io is a free online service and tool that allows users to scan and analyze URLs (Uniform Resource Locators) or website links to determine potential security threats and risks associated with those URLs. It helps users assess the safety and trustworthiness of a website or a specific web page.
Note
This article contains information about third-party plugins. This is provided to help complete integration scenarios. However, Microsoft does not provide troubleshooting support for third-party plugins. Contact the third-party vendor for support.
Know before you begin
Integration with Security Copilot works with an API key. You'll need to take the following steps before using the plugin.
Get your URL Scan API key. If you don't have one yet, follow these steps:
Go to the urlscan.io website and create your account. Then sign in.
Go to your profile page, and then select + Create API key.
Return to your profile page, and copy your API Key.
Sign in to Microsoft Security Copilot.
Access Manage Plugins by selecting the Plugin button from the prompt bar.
Next to UrlScan, select Set up.
In the Value field, paste your API Key, and then select Save.
Sample UrlScan prompts
After the UrlScan plugin is configured, you can use it by taking one of the following steps:
- Access the capability directly by typing
UrlScan
in the prompt bar; or - Prompt Security Copilot to use the UrlScan API on a website
The following table summarizes how this capability works.
Capability | Example prompts | What it does |
---|---|---|
UrlScan Required Input: URL |
- Can you scan https://www.microsoft.com/en-us/ for threats. - Use Url scan to check if https://www.microsoft.com/en-us/ is malicious |
Scans a URL for potential security threats and risks. |
Troubleshoot the UrlScan plugin
Errors occur
If you counter errors, such as Couldn't complete your request, or An unknown error occurred, make sure the plugin is turned on. If the issue persists, sign out of Security Copilot, and then sign back in.
Prompts aren't invoking the correct capabilities
If prompts are not invoking the correct capabilities, or prompts are invoking some other capability set, you might have custom plugins or other plugins that have similar functionality as the capability set you want to use.
Provide feedback
To provide feedback, contact UrlScan.