A baseline scan is an initial security review that records the starting state of a system, such as a code repository, configuration, or network. It identifies existing findings so later checks can distinguish known issues from newly introduced vulnerabilities or changes.
In continuous code security, the scan provides a reference point for tracking whether findings are fixed, persist, or reappear after changes. This helps teams prioritize regressions and measure remediation over time. A baseline is only as useful as its scope and accuracy: teams should review results, keep the assessed project context current, and verify proposed fixes rather than treating the initial scan as proof that the system is secure.