# Scan a JavaScript URL

This article will walk you through the process of scanning a JavaScript URL using Jsmon to detect secrets and security vulnerabilities.

#### Step 1: Navigate to the Scans Page

* First, select your **workspace**.
* Click on **"Go to scans"** to navigate to the scans window.

<figure><img src="https://2738632974-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FFcW4H0sBfGltAsgUhISS%2Fuploads%2Fc84xmXAn3rsJqgMtmnbJ%2Fhttps---files.gitbook.com-v0-b-gitbook-x-prod.appspot.com-o-spaces%252FFcW4H0sBfGltAsgUhISS%252Fuploads%252F11eYzcgs4PXxUvLvvqAw%252Fimage.png%3Falt%3Dmedia%26token%3D47b4800a-264c-4559-9fbf-b97aff3405f2.png?alt=media&#x26;token=b88c8772-d930-4f25-b660-6953e9ee09d7" alt=""><figcaption></figcaption></figure>

#### Step 2: Initiate a JS URL Scan

* On the scans page, select **"JS URL Scan."**
* Paste the JavaScript URL you want to scan into the provided input field.

<figure><img src="https://2738632974-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FFcW4H0sBfGltAsgUhISS%2Fuploads%2FESk8b9vr7O5VHzkxi5tp%2Fimage.png?alt=media&#x26;token=bd15ae5e-be61-4960-b739-0e14d73e2b4e" alt=""><figcaption></figcaption></figure>

#### Step 3: Start the Scan

* Click the **"Submit"** button to begin the scan.
* The scan's status will be visible in the "Recent Scans" window, and you can click the reload icon to check its current status.

#### Step 4: View the Scan Results

* Once the status changes to **"success,"** you can click on the scan entry to view the results.
* The results will provide an overview of API endpoints, any leaked secrets, and PII data detected.

<figure><img src="https://2738632974-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FFcW4H0sBfGltAsgUhISS%2Fuploads%2F73S7qMKEVUxK9FqO1exW%2Fimage.png?alt=media&#x26;token=e3d20736-0a0a-4ac5-8633-372cfd6241f5" alt=""><figcaption></figcaption></figure>

#### Step 5: View All Secrets

* The overview may only show a limited number of entries. To see the full list of detected secrets, click on **"View All Secrets."** \[00:01:05]

For more information, you can watch the full video tutorial here: [How to Scan a JavaScript URL in Jsmon | Detect Secrets & Security Issues](https://www.youtube.com/watch?v=JyOh8whyDP4)

{% embed url="<https://www.youtube.com/watch?v=JyOh8whyDP4>" %}

<a href="https://cal.com/jsmon/30min" class="button primary" data-icon="calendar-days">Want to learn more? Schedule a meeting with Jsmon Team!</a>