# Event Types

There are many types of events. Each type has a distinct key that you can use to filter events or configure integrations. The full list is below:

<table><thead><tr><th>Key</th><th width="251">Subject</th><th>Triggers when</th></tr></thead><tbody><tr><td>account-apikey-add</td><td>API Key Added</td><td>A new API key is added</td></tr><tr><td>account-user-add</td><td>User Added</td><td>A user is added</td></tr><tr><td>asset-connected</td><td>Asset New Connected</td><td>A new asset is found via an integration</td></tr><tr><td>asset-host</td><td>Asset New Host</td><td>A new asset (host) is discovered</td></tr><tr><td>asset-ip</td><td>Asset New IP</td><td>A new asset (IP) is discovered</td></tr><tr><td>integration-add</td><td>integration Added</td><td>A new integration is added</td></tr><tr><td>integration-delete</td><td>Integration Deleted</td><td>A conector is deleted</td></tr><tr><td>integration-error</td><td>Integration Error</td><td>An issue is detected with an integration</td></tr><tr><td>integration-scan</td><td>Integration Scan</td><td>A integration scan is completed</td></tr><tr><td>domain-add</td><td>Domain Added</td><td>A new domain is added for Discovery</td></tr><tr><td>domain-delete</td><td>Domain Deleted</td><td>A domain is deleted</td></tr><tr><td>domain-scan-finish</td><td>Scan Complete</td><td>A discovery scan completes on a domain</td></tr><tr><td>domain-scan-first</td><td>First Scan Complete</td><td>A discovery scan completes on a domain for the first time</td></tr><tr><td>domain-scan-start</td><td>Scan Started</td><td>A discovery scan starts on a domain</td></tr><tr><td>firewall-banner-change</td><td>Firewall Port Banner Change</td><td>The banner information transmitted by a port is different from the previous scan</td></tr><tr><td>firewall-port-add</td><td>Firewall Port Opened</td><td>A open port is detected during a Firewall scan that was not detected on the previous scan</td></tr><tr><td>issue-add</td><td>New Issue Detected</td><td>An issue was discovered during a scan that was not detected on a previous scan</td></tr><tr><td>issue-add-first-scan</td><td>New Issue Detected (First Scan)</td><td>An issue was discovered during the first scan of a target</td></tr><tr><td>info-add</td><td>New Informational Finding Detected</td><td>An informational finding was discovered during a scan that was not detected on a previous scan</td></tr><tr><td>info-add-first-scan</td><td>New Informational Finding Detected (First Scan)</td><td>An informational finding was discovered during the first scan of a target</td></tr><tr><td>network-add</td><td>Network Added</td><td>A new network is added to your account</td></tr><tr><td>network-delete</td><td>Network Deleted</td><td>A network is deleted</td></tr><tr><td>network-ip-add</td><td>New Network IP Discovered</td><td>An active IP address is detected on a network that was not detected on the previous scan</td></tr><tr><td>network-ip-remove</td><td>Network IP Offline</td><td>An active IP address is not detected on a network that was detected on the previous scan</td></tr><tr><td>network-port-add</td><td>New Network Port Discovered</td><td>An open port is detected during a discovery scan on a network that was not detected on the previous scan</td></tr><tr><td>network-port-remove</td><td>Network Port Closed</td><td>An open port is not detected during a discovery scan on a network that was detected on the previous scan</td></tr><tr><td>network-scan-finish</td><td>Scan Complete</td><td>A discovery scan completes on a network</td></tr><tr><td>network-scan-start</td><td>Scan Started</td><td>A discovery scan starts on a network</td></tr><tr><td>pci-report-approved</td><td>PCI Report Approved</td><td>A submitted PCI report is approved</td></tr><tr><td>pci-report-expire-past</td><td>PCI Report Has Expired</td><td>The validity of a PCI report expires. This occurs when 91 days have elapsed since a PCI report was approved.</td></tr><tr><td>pci-report-expire-soon</td><td>PCI Report Expires Soon</td><td>The validity of a PCI report expires in 30 days. This occurs 60 days after a PCI report is approved.</td></tr><tr><td>pci-report-expire-today</td><td>PCI Report Expires Today</td><td>The validity of a PCI report is about to expire. This occurs 90 days after a PCI report is approved.</td></tr><tr><td>pci-report-rejected</td><td>PCI Report Rejected</td><td>A submitted PCI report is rejected</td></tr><tr><td>project-engineer</td><td>Project Engineer Assigned</td><td>A security engineer is assigned to a project</td></tr><tr><td>project-file</td><td>Project File Attached</td><td>A new file is attached to a project</td></tr><tr><td>project-state</td><td>Project State Changed</td><td>The state of a penetration test or other project is modified</td></tr><tr><td>target-add</td><td>Target Added</td><td>A new target is added to your account</td></tr><tr><td>target-archive</td><td>Target Archived</td><td>A target is archived</td></tr><tr><td>target-change</td><td>Target Change</td><td>The scan settings of a target are changed</td></tr><tr><td>target-delete</td><td>Target Deleted</td><td>A target is deleted</td></tr><tr><td>target-host-change</td><td>Target Host Change</td><td>The hostname of a target is changed</td></tr><tr><td>target-risk-change</td><td>Target Risk Change</td><td>The risk score of a target changes</td></tr><tr><td>target-scan-canceled</td><td>Target Scan Canceled</td><td>A target scan is canceled</td></tr><tr><td>target-scan-failed</td><td>Scan Failed</td><td>A scan fails to complete on a target</td></tr><tr><td>target-scan-finish</td><td>Scan Complete</td><td>A scan completes on a target</td></tr><tr><td>target-scan-first</td><td>First Scan Complete</td><td>A scan completes on a target for the first time</td></tr><tr><td>target-scan-start</td><td>Scan Started</td><td>A scan starts on a target</td></tr><tr><td>target-unarchive</td><td>Target Unarchived</td><td>A target is unarchived</td></tr><tr><td>technology-add</td><td>New Technology Detected</td><td>New technology was discovered that was not found on the last scan</td></tr><tr><td>technology-add-first-scan</td><td>New Technology Detected (First Scan)</td><td>New technology was discovered on the first scan of a target</td></tr><tr><td>website-cert-expired</td><td>SSL Certificate Expired</td><td>A TLS or SSL certificate is detected as expired during the website scan</td></tr><tr><td>website-cert-expiring</td><td>SSL Certificate Expiring</td><td>A TLS or SSL certificate is detected as expiring within 30 days during a website scan</td></tr><tr><td>website-cert-new-country</td><td>SSL Certificate New Country</td><td>The TLS or SSL certificate country code detected during the website scan doesn't match that of the previous scan</td></tr><tr><td>website-cert-new-issuer</td><td>SSL Certificate New Issuer</td><td>The TLS or SSL certificate issuer detected during the website scan doesn't match that of the previous scan</td></tr><tr><td>website-cert-risk</td><td>SSL Certificate Risk</td><td>The risk rating of a TLS or SSL certificate changes from low to medium or high</td></tr><tr><td>website-cookie-monitor-change</td><td>Monitored Website Cookie Changed</td><td>The value of a monitored website cookie is detected as different than during the previous website scan</td></tr><tr><td>website-cookie-new-country</td><td>Website Cookie New Country</td><td>A cookie is detected loading from a different country than it did during the previous scan</td></tr><tr><td>website-cookie-oos</td><td>Website Cookie Out-of-Scope</td><td>A cookie is detected from a host that is out-of-scope during a website scan</td></tr><tr><td>website-cookie-risk</td><td>Website Cookie Risk</td><td>The risk rating of a cookie changes from low to medium or high</td></tr><tr><td>website-download-monitor-change</td><td>Monitored Website Download Changed</td><td>A monitored download is detected as different than during the previous website scan</td></tr><tr><td>website-download-new-country</td><td>Website Download New Country</td><td>A website download is detected in a new country during a website scan</td></tr><tr><td>website-download-oos</td><td>Website Download Out-of-Scope</td><td>A website download is detected out-of-scope during a website scan</td></tr><tr><td>website-download-risk</td><td>Website Download Risk</td><td>The risk rating of a download changes from low to medium or high</td></tr><tr><td>website-form-monitor-change</td><td>Monitored Website Form Changed</td><td>A monitored form's content is detected as different than in the previous scan</td></tr><tr><td>website-form-new-country</td><td>Website Form New Country</td><td>A website form is detected in a new country during a website scan</td></tr><tr><td>website-form-oos</td><td>Website Form Out-of-Scope</td><td>A website form is first detected sending data to an out-of-scope domain</td></tr><tr><td>website-form-risk</td><td>Website Form Risk</td><td>The risk of a form changes from low to medium or high</td></tr><tr><td>website-header-monitor-change</td><td>Monitored Website Header Changed</td><td>The value of a monitored HTTP header is detected as different than during the previous website scan</td></tr><tr><td>website-header-risk</td><td>Website Header Risk</td><td>The risk rating of an HTTP header changes from low to medium or high</td></tr><tr><td>website-link-new-country</td><td>Website Link New Country</td><td>A website link is detected in a new country during a website scan</td></tr><tr><td>website-link-new-email</td><td>Website Link New Email</td><td>A new href=\mailto:...\" address is detected during a website scan"</td></tr><tr><td>website-link-new-phone</td><td>Website Link New Phone</td><td>A new href=\tel:...\" address is detected during a website scan"</td></tr><tr><td>website-link-oos</td><td>Website Link Out-of-Scope</td><td>A website link is detected out-of-scope during a website scan</td></tr><tr><td>website-link-risk</td><td>Website Link Risk</td><td>The risk of a link changes from low to medium or high</td></tr><tr><td>website-script-monitor-change</td><td>Monitored Website Script Changed</td><td>The content of a monitored script is different than during the previous website scan</td></tr><tr><td>website-script-new-country</td><td>Website Script New Country</td><td>A script is detected as loading from a different country than it did during the previous scan</td></tr><tr><td>website-script-oos</td><td>Website Script Out-of-Scope</td><td>A script is detected on a scan that didn't exist on the previous scan</td></tr><tr><td>website-script-risk</td><td>Website Script Risk</td><td>The risk rating of a script changes from low to medium or high</td></tr><tr><td>website-traffic-new-country</td><td>Website Traffic New Country</td><td>The website traffic is detected in a new country during a website scan</td></tr><tr><td>website-traffic-oos</td><td>Website Traffic Out-of-Scope</td><td>The website traffic is detected out-of-scope during a website scan</td></tr><tr><td>website-whois-change</td><td>Domain Registration Changes</td><td>The ICANN domain registration details are different than during the previous website scan</td></tr><tr><td>website-whois-expired</td><td>Domain Registration Expired</td><td>The ICANN domain registration is detected as expired during a website scan</td></tr><tr><td>website-whois-expiring</td><td>Domain Registration Expiring</td><td>The ICANN domain registration is detected as expiring within 30 days during a website scan</td></tr><tr><td>workflow-change</td><td>Workflow Change</td><td>The status or assignee of a workflow is changed</td></tr></tbody></table>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.halosecurity.com/docs/platform/events/event-types.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.