SSRF scanning tests API endpoints that accept a URL as input (e.g. link previewers, webhook handlers, file importers). Enter the API endpoint and the parameter name that accepts the URL. This scanner is not for scanning regular websites — use Security Headers, Exposed Files, or Cookie Security for that.