Try a scan on a sample application first. We have intentionally posted versions with known vulnerabilities to help you see how the Application Health Check works: Sample ApplicationWebGoat
