[Yandex Cloud documentation](../../../index.md) > [Yandex Security Deck](../../index.md) > [Step-by-step guides](../index.md) > [Vulnerability Management (VM)](index.md) > Creating an endpoint scan schedule

# Creating an endpoint scan schedule in the Vulnerability Management module (VM)

{% note info %}

If the Vulnerability Management module is not activated, [activate](enable-vulnerability-management.md) it.

To create an endpoint [scan schedule](../../concepts/vulnerability-management.md#endpoint-scan-jobs), you need the `vulnerability-manager.editor` [role](../../security/vm-roles.md#vulnerability-manager-editor) or higher.

{% endnote %}

To create a new endpoint scan schedule:

{% list tabs group=instructions %}

- Security Deck UI {#cloud-sd}

  1. Go to [Yandex Security Deck](https://center.yandex.cloud/security/).
  1. In the left-hand panel, select ![sd-vm-icon](../../../_assets/security-deck/sd-vm-icon.svg) **Vulnerability management**.
  1. At the top of the window, select the correct [workspace](../../concepts/workspace.md).
  1. Go to the **Scan schedules** tab and click ![magnifier](../../../_assets/console-icons/magnifier.svg) **New scan**. In the window that opens:

      1. Under **Target group**, configure the scan settings for the [target group](../../concepts/vulnerability-management.md#scan-target-groups):

          * In the **Resources** field, select:
          
              * `All resources`: For the target group to include [targets](../../concepts/vulnerability-management.md#endpoint-vulnerability-scan-targets) residing within Yandex Cloud resources across the entire Vulnerability Management scope defined in the workspace.
              * `Selected resources`: To restrict the target discovery scope to specific Yandex Cloud resources.
          
                  Click ![circle-plus](../../../_assets/console-icons/circle-plus.svg) **Select resources** to select individual clouds and folders for analysis.
          * In the **Addresses** field, select:
          
              * `No limit`: To scan all possible paths on the discovered endpoints.
              * `Ignore addresses`: To specify addresses to exclude from scanning.
          
                  The field supports string values containing a partial path or a regular expression, e.g., `/api` or `[?&](token|auth)=([^&]+)`.
          
                  One field must contain exactly one exclusion. As you type an exclusion into the field, a new field appears automatically for your next exclusion.

      1. Under **Scan type**, select the correct [scan mode](../../concepts/vulnerability-management.md#endpoint-scanning-modes):
         
         * `Advanced attack surface analysis`: To scan for additional targets that may have been missed during the basic analysis. For more information on this scan mode, see [Advanced attack surface analysis](../../concepts/vulnerability-management.md#endpoint-advanced-analysis).
         * `Vulnerability scanning`: To perform deep signature scanning and attack testing to detect various types of vulnerabilities and threats. For more information on this scan mode, see [Deep vulnerability scanning](../../concepts/vulnerability-management.md#endpoint-deep-scanning).
         
             Optionally, click **Advanced module configuration** to select specific modules (analysis methods) to apply during deep vulnerability scanning.          
      1. Under **Launch settings**, set the basic schedule parameters:

          * In the **Run** field, select how often to run scans under the current schedule:
            
            * `Every 7 days`
            * `Every 14 days`
            * `Every 30 days`
            * Custom interval in days
          * Set the **Schedule name**.
      1. Click **Create scan**.

{% endlist %}

This will create a new scan schedule and start its first scan.

#### Useful links {#see-also}

* [Scanning application and service endpoints](../../concepts/vulnerability-management.md#endpoint-vulnerability-scanning)
* [Running an endpoint scan in Vulnerability Management (VM)](run-scan-job.md)
* [Managing endpoint scan schedules in the Vulnerability Management (VM) module](manage-scan-job.md)