> For the complete documentation index, see [llms.txt](https://docs.adsecure.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.adsecure.com/adsecure-documentation/how-to-guides/allowlist-rules.md).

# How to - Manage Allowlist Rules

## Introduction

An Allowlist provides the option to explicitly allow some exceptions when dealing with alerts.

On some occasions, you might want to make an exception for a certain domain and/or alert violations, to temporarily not be taken into account when you check the compliance of ads or site pages within AdSecure. A good example of this would be when you are in the process of resolving a known threat or quality issue detected on a project that scans frequently. Applying an Allowlist Rule in such a case will allow you to save time to focus on new alert violations that may occur on the project, rather than having to repeatedly check alerts on the known issue you are in the process of resolving.

In this guide, we will further explain in detail how to:

* Navigate to Allowlist Rules page
* Create an Allowlist Rule
* Delete an Allowlist Rule
* Whitelist specific antivirus vendors from VirusTotal
* The reporting of Allowlisted alerts

### Navigate to Allowlist Rules section

You can navigate to the **Allowlist Rules** section via the navigation menu on the left side of the application.

![](https://405863316-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsuRaI0FQmgJwzlmWKw5f%2Fuploads%2FpTm4cqU8RsY8BPwOEwJD%2Fa70b409b33e3.png?alt=media\&token=34caf831-5ff9-4ca0-84f5-1d23fc2e6061)

### Create an Allowlist Rule

To create a new Allowlist Rule, simply click on the "New Allowlist Rule" button at the top right corner of the screen.

![](https://405863316-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsuRaI0FQmgJwzlmWKw5f%2Fuploads%2FmfT27gZ34lFA05vD9TvY%2Fe1274e1d6305.png?alt=media\&token=f326e856-4bcd-4aed-8b2d-2c9a935f7047)

A panel will slide-in from the right side of your screen.

![](https://405863316-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsuRaI0FQmgJwzlmWKw5f%2Fuploads%2FP5tgMj5h9AHUSxZrJkjH%2F206421d524cd.png?alt=media\&token=ddb2b893-7b10-46ea-baac-2a11a98f3a63)

**Domain**

* Select 'All domains' or enter a specific domain.
* When the option 'All domains' is selected, 1 or more Alert violations need to be selected from the drop-down list. When a specific domain is entered and no Alert violations are selected, the rule will apply to all Alert violations.
* Choose the duration for which the rule will be active.

**Scope**

* Select 'Project' or 'All analyses', to indicate whether the rule should apply only to analyses from a specific project, or to all the analyses. (Note: this means analyses from all sources, including API analyses).
* When the option 'Project' is selected, you need to select a specific project.

### Delete an Allowlist Rule

To delete an Allowlist Rule, click on the delete icon next to the rule.

![](https://405863316-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsuRaI0FQmgJwzlmWKw5f%2Fuploads%2FCOkULvHvsS9P8ENRmxxq%2F9c7e732ca5f2.png?alt=media\&token=299518d5-0e12-444e-a5cb-a406bc183529)

Allowlist Rules can be deleted at any time in case they should no longer be applied.

| Note: Allowlist Rules can't be edited. You can delete a rule and create a new rule is desired. |
| ---------------------------------------------------------------------------------------------- |

### Whitelist specific antivirus vendors from VirusTotal

When you find yourself lacking trust in any of the antivirus vendors listed on VirusTotal, it's worth considering the option to add them to your Allowlist Rule. By doing so, you can prevent unnecessary alerts and notifications.

{% hint style="danger" %}
Image missing: the source image is stored in a private GitHub repository and is not reachable publicly (it is also broken on docs.adsecure.com).
{% endhint %}

### Reporting of Allowlisted alerts

Allowlisted alerts will still be reported by AdSecure. However, they will not look or act like a normal detection on an alert.

Allowlisted alerts will be displayed in a lighter shade and contain a strikethrough, to indicate that the alert is treated like an allowed exception. Allowlisted alerts will be visible in AdSecure reports and in the Analyses listing within the Analyses section of the AdSecure application.

Look of allowlisted alerts:

![](https://405863316-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsuRaI0FQmgJwzlmWKw5f%2Fuploads%2FneCfhWeWAfiTaoyP1cRC%2F29cca6e944f7.png?alt=media\&token=7985c85e-4f4a-483b-ae23-1565564f9961)

When you activated external [notifications](/adsecure-documentation/how-to-guides/manage-notifications.md) on alerts (like an email or an HTTP callback), allowlisted alerts won't trigger any notifications as long as the allowlisted rule is active.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.adsecure.com/adsecure-documentation/how-to-guides/allowlist-rules.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.