diff --git a/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1.Tests/WebSecurityScannerClientTest.g.cs b/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1.Tests/WebSecurityScannerClientTest.g.cs
index bf1f84d6378f..eee7a0f04d7e 100644
--- a/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1.Tests/WebSecurityScannerClientTest.g.cs
+++ b/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1.Tests/WebSecurityScannerClientTest.g.cs
@@ -57,6 +57,7 @@ public void CreateScanConfigRequestObject()
                 RiskLevel = ScanConfig.Types.RiskLevel.Unspecified,
                 ManagedScan = true,
                 StaticIpScan = false,
+                IgnoreHttpStatusErrors = false,
             };
             mockGrpcClient.Setup(x => x.CreateScanConfig(request, moq::It.IsAny<grpccore::CallOptions>())).Returns(expectedResponse);
             WebSecurityScannerClient client = new WebSecurityScannerClientImpl(mockGrpcClient.Object, null, null);
@@ -94,6 +95,7 @@ public void CreateScanConfigRequestObject()
                 RiskLevel = ScanConfig.Types.RiskLevel.Unspecified,
                 ManagedScan = true,
                 StaticIpScan = false,
+                IgnoreHttpStatusErrors = false,
             };
             mockGrpcClient.Setup(x => x.CreateScanConfigAsync(request, moq::It.IsAny<grpccore::CallOptions>())).Returns(new grpccore::AsyncUnaryCall<ScanConfig>(stt::Task.FromResult(expectedResponse), null, null, null, null));
             WebSecurityScannerClient client = new WebSecurityScannerClientImpl(mockGrpcClient.Object, null, null);
@@ -163,6 +165,7 @@ public void GetScanConfigRequestObject()
                 RiskLevel = ScanConfig.Types.RiskLevel.Unspecified,
                 ManagedScan = true,
                 StaticIpScan = false,
+                IgnoreHttpStatusErrors = false,
             };
             mockGrpcClient.Setup(x => x.GetScanConfig(request, moq::It.IsAny<grpccore::CallOptions>())).Returns(expectedResponse);
             WebSecurityScannerClient client = new WebSecurityScannerClientImpl(mockGrpcClient.Object, null, null);
@@ -199,6 +202,7 @@ public void GetScanConfigRequestObject()
                 RiskLevel = ScanConfig.Types.RiskLevel.Unspecified,
                 ManagedScan = true,
                 StaticIpScan = false,
+                IgnoreHttpStatusErrors = false,
             };
             mockGrpcClient.Setup(x => x.GetScanConfigAsync(request, moq::It.IsAny<grpccore::CallOptions>())).Returns(new grpccore::AsyncUnaryCall<ScanConfig>(stt::Task.FromResult(expectedResponse), null, null, null, null));
             WebSecurityScannerClient client = new WebSecurityScannerClientImpl(mockGrpcClient.Object, null, null);
@@ -238,6 +242,7 @@ public void UpdateScanConfigRequestObject()
                 RiskLevel = ScanConfig.Types.RiskLevel.Unspecified,
                 ManagedScan = true,
                 StaticIpScan = false,
+                IgnoreHttpStatusErrors = false,
             };
             mockGrpcClient.Setup(x => x.UpdateScanConfig(request, moq::It.IsAny<grpccore::CallOptions>())).Returns(expectedResponse);
             WebSecurityScannerClient client = new WebSecurityScannerClientImpl(mockGrpcClient.Object, null, null);
@@ -275,6 +280,7 @@ public void UpdateScanConfigRequestObject()
                 RiskLevel = ScanConfig.Types.RiskLevel.Unspecified,
                 ManagedScan = true,
                 StaticIpScan = false,
+                IgnoreHttpStatusErrors = false,
             };
             mockGrpcClient.Setup(x => x.UpdateScanConfigAsync(request, moq::It.IsAny<grpccore::CallOptions>())).Returns(new grpccore::AsyncUnaryCall<ScanConfig>(stt::Task.FromResult(expectedResponse), null, null, null, null));
             WebSecurityScannerClient client = new WebSecurityScannerClientImpl(mockGrpcClient.Object, null, null);
@@ -510,6 +516,7 @@ public void GetFindingRequestObject()
                 VulnerableHeaders = new VulnerableHeaders(),
                 Form = new Form(),
                 Severity = Finding.Types.Severity.Medium,
+                Xxe = new Xxe(),
             };
             mockGrpcClient.Setup(x => x.GetFinding(request, moq::It.IsAny<grpccore::CallOptions>())).Returns(expectedResponse);
             WebSecurityScannerClient client = new WebSecurityScannerClientImpl(mockGrpcClient.Object, null, null);
@@ -545,6 +552,7 @@ public void GetFindingRequestObject()
                 VulnerableHeaders = new VulnerableHeaders(),
                 Form = new Form(),
                 Severity = Finding.Types.Severity.Medium,
+                Xxe = new Xxe(),
             };
             mockGrpcClient.Setup(x => x.GetFindingAsync(request, moq::It.IsAny<grpccore::CallOptions>())).Returns(new grpccore::AsyncUnaryCall<Finding>(stt::Task.FromResult(expectedResponse), null, null, null, null));
             WebSecurityScannerClient client = new WebSecurityScannerClientImpl(mockGrpcClient.Object, null, null);
diff --git a/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/Finding.g.cs b/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/Finding.g.cs
index 96dc3453c0a1..024268b7ba30 100644
--- a/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/Finding.g.cs
+++ b/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/Finding.g.cs
@@ -28,7 +28,7 @@ public static partial class FindingReflection {
             "cHJvdG8SImdvb2dsZS5jbG91ZC53ZWJzZWN1cml0eXNjYW5uZXIudjEaH2dv",
             "b2dsZS9hcGkvZmllbGRfYmVoYXZpb3IucHJvdG8aGWdvb2dsZS9hcGkvcmVz",
             "b3VyY2UucHJvdG8aNmdvb2dsZS9jbG91ZC93ZWJzZWN1cml0eXNjYW5uZXIv",
-            "djEvZmluZGluZ19hZGRvbi5wcm90byKxBwoHRmluZGluZxIMCgRuYW1lGAEg",
+            "djEvZmluZGluZ19hZGRvbi5wcm90byLsBwoHRmluZGluZxIMCgRuYW1lGAEg",
             "ASgJEhQKDGZpbmRpbmdfdHlwZRgCIAEoCRJLCghzZXZlcml0eRgRIAEoDjI0",
             "Lmdvb2dsZS5jbG91ZC53ZWJzZWN1cml0eXNjYW5uZXIudjEuRmluZGluZy5T",
             "ZXZlcml0eUID4EEDEhMKC2h0dHBfbWV0aG9kGAMgASgJEhIKCmZ1enplZF91",
@@ -44,22 +44,23 @@ public static partial class FindingReflection {
             "bmVyLnYxLlZ1bG5lcmFibGVIZWFkZXJzElcKFXZ1bG5lcmFibGVfcGFyYW1l",
             "dGVycxgNIAEoCzI4Lmdvb2dsZS5jbG91ZC53ZWJzZWN1cml0eXNjYW5uZXIu",
             "djEuVnVsbmVyYWJsZVBhcmFtZXRlcnMSNAoDeHNzGA4gASgLMicuZ29vZ2xl",
-            "LmNsb3VkLndlYnNlY3VyaXR5c2Nhbm5lci52MS5Yc3MiUQoIU2V2ZXJpdHkS",
-            "GAoUU0VWRVJJVFlfVU5TUEVDSUZJRUQQABIMCghDUklUSUNBTBABEggKBEhJ",
-            "R0gQAhIKCgZNRURJVU0QAxIHCgNMT1cQBDqEAepBgAEKKXdlYnNlY3VyaXR5",
-            "c2Nhbm5lci5nb29nbGVhcGlzLmNvbS9GaW5kaW5nElNwcm9qZWN0cy97cHJv",
-            "amVjdH0vc2NhbkNvbmZpZ3Mve3NjYW5fY29uZmlnfS9zY2FuUnVucy97c2Nh",
-            "bl9ydW59L2ZpbmRpbmdzL3tmaW5kaW5nfUKAAgomY29tLmdvb2dsZS5jbG91",
-            "ZC53ZWJzZWN1cml0eXNjYW5uZXIudjFCDEZpbmRpbmdQcm90b1ABWlRnb29n",
-            "bGUuZ29sYW5nLm9yZy9nZW5wcm90by9nb29nbGVhcGlzL2Nsb3VkL3dlYnNl",
-            "Y3VyaXR5c2Nhbm5lci92MTt3ZWJzZWN1cml0eXNjYW5uZXKqAiJHb29nbGUu",
-            "Q2xvdWQuV2ViU2VjdXJpdHlTY2FubmVyLlYxygIiR29vZ2xlXENsb3VkXFdl",
-            "YlNlY3VyaXR5U2Nhbm5lclxWMeoCJUdvb2dsZTo6Q2xvdWQ6OldlYlNlY3Vy",
-            "aXR5U2Nhbm5lcjo6VjFiBnByb3RvMw=="));
+            "LmNsb3VkLndlYnNlY3VyaXR5c2Nhbm5lci52MS5Yc3MSOQoDeHhlGBIgASgL",
+            "MicuZ29vZ2xlLmNsb3VkLndlYnNlY3VyaXR5c2Nhbm5lci52MS5YeGVCA+BB",
+            "AyJRCghTZXZlcml0eRIYChRTRVZFUklUWV9VTlNQRUNJRklFRBAAEgwKCENS",
+            "SVRJQ0FMEAESCAoESElHSBACEgoKBk1FRElVTRADEgcKA0xPVxAEOoQB6kGA",
+            "AQopd2Vic2VjdXJpdHlzY2FubmVyLmdvb2dsZWFwaXMuY29tL0ZpbmRpbmcS",
+            "U3Byb2plY3RzL3twcm9qZWN0fS9zY2FuQ29uZmlncy97c2Nhbl9jb25maWd9",
+            "L3NjYW5SdW5zL3tzY2FuX3J1bn0vZmluZGluZ3Mve2ZpbmRpbmd9QoACCiZj",
+            "b20uZ29vZ2xlLmNsb3VkLndlYnNlY3VyaXR5c2Nhbm5lci52MUIMRmluZGlu",
+            "Z1Byb3RvUAFaVGdvb2dsZS5nb2xhbmcub3JnL2dlbnByb3RvL2dvb2dsZWFw",
+            "aXMvY2xvdWQvd2Vic2VjdXJpdHlzY2FubmVyL3YxO3dlYnNlY3VyaXR5c2Nh",
+            "bm5lcqoCIkdvb2dsZS5DbG91ZC5XZWJTZWN1cml0eVNjYW5uZXIuVjHKAiJH",
+            "b29nbGVcQ2xvdWRcV2ViU2VjdXJpdHlTY2FubmVyXFYx6gIlR29vZ2xlOjpD",
+            "bG91ZDo6V2ViU2VjdXJpdHlTY2FubmVyOjpWMWIGcHJvdG8z"));
       descriptor = pbr::FileDescriptor.FromGeneratedCode(descriptorData,
           new pbr::FileDescriptor[] { global::Google.Api.FieldBehaviorReflection.Descriptor, global::Google.Api.ResourceReflection.Descriptor, global::Google.Cloud.WebSecurityScanner.V1.FindingAddonReflection.Descriptor, },
           new pbr::GeneratedClrTypeInfo(null, null, new pbr::GeneratedClrTypeInfo[] {
-            new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.Finding), global::Google.Cloud.WebSecurityScanner.V1.Finding.Parser, new[]{ "Name", "FindingType", "Severity", "HttpMethod", "FuzzedUrl", "Body", "Description", "ReproductionUrl", "FrameUrl", "FinalUrl", "TrackingId", "Form", "OutdatedLibrary", "ViolatingResource", "VulnerableHeaders", "VulnerableParameters", "Xss" }, null, new[]{ typeof(global::Google.Cloud.WebSecurityScanner.V1.Finding.Types.Severity) }, null, null)
+            new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.Finding), global::Google.Cloud.WebSecurityScanner.V1.Finding.Parser, new[]{ "Name", "FindingType", "Severity", "HttpMethod", "FuzzedUrl", "Body", "Description", "ReproductionUrl", "FrameUrl", "FinalUrl", "TrackingId", "Form", "OutdatedLibrary", "ViolatingResource", "VulnerableHeaders", "VulnerableParameters", "Xss", "Xxe" }, null, new[]{ typeof(global::Google.Cloud.WebSecurityScanner.V1.Finding.Types.Severity) }, null, null)
           }));
     }
     #endregion
@@ -121,6 +122,7 @@ public sealed partial class Finding : pb::IMessage<Finding>
       vulnerableHeaders_ = other.vulnerableHeaders_ != null ? other.vulnerableHeaders_.Clone() : null;
       vulnerableParameters_ = other.vulnerableParameters_ != null ? other.vulnerableParameters_.Clone() : null;
       xss_ = other.xss_ != null ? other.xss_.Clone() : null;
+      xxe_ = other.xxe_ != null ? other.xxe_.Clone() : null;
       _unknownFields = pb::UnknownFieldSet.Clone(other._unknownFields);
     }
 
@@ -397,6 +399,21 @@ public sealed partial class Finding : pb::IMessage<Finding>
       }
     }
 
+    /// <summary>Field number for the "xxe" field.</summary>
+    public const int XxeFieldNumber = 18;
+    private global::Google.Cloud.WebSecurityScanner.V1.Xxe xxe_;
+    /// <summary>
+    /// Output only. An addon containing information reported for an XXE, if any.
+    /// </summary>
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public global::Google.Cloud.WebSecurityScanner.V1.Xxe Xxe {
+      get { return xxe_; }
+      set {
+        xxe_ = value;
+      }
+    }
+
     [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
     [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
     public override bool Equals(object other) {
@@ -429,6 +446,7 @@ public sealed partial class Finding : pb::IMessage<Finding>
       if (!object.Equals(VulnerableHeaders, other.VulnerableHeaders)) return false;
       if (!object.Equals(VulnerableParameters, other.VulnerableParameters)) return false;
       if (!object.Equals(Xss, other.Xss)) return false;
+      if (!object.Equals(Xxe, other.Xxe)) return false;
       return Equals(_unknownFields, other._unknownFields);
     }
 
@@ -453,6 +471,7 @@ public sealed partial class Finding : pb::IMessage<Finding>
       if (vulnerableHeaders_ != null) hash ^= VulnerableHeaders.GetHashCode();
       if (vulnerableParameters_ != null) hash ^= VulnerableParameters.GetHashCode();
       if (xss_ != null) hash ^= Xss.GetHashCode();
+      if (xxe_ != null) hash ^= Xxe.GetHashCode();
       if (_unknownFields != null) {
         hash ^= _unknownFields.GetHashCode();
       }
@@ -539,6 +558,10 @@ public sealed partial class Finding : pb::IMessage<Finding>
         output.WriteRawTag(136, 1);
         output.WriteEnum((int) Severity);
       }
+      if (xxe_ != null) {
+        output.WriteRawTag(146, 1);
+        output.WriteMessage(Xxe);
+      }
       if (_unknownFields != null) {
         _unknownFields.WriteTo(output);
       }
@@ -617,6 +640,10 @@ public sealed partial class Finding : pb::IMessage<Finding>
         output.WriteRawTag(136, 1);
         output.WriteEnum((int) Severity);
       }
+      if (xxe_ != null) {
+        output.WriteRawTag(146, 1);
+        output.WriteMessage(Xxe);
+      }
       if (_unknownFields != null) {
         _unknownFields.WriteTo(ref output);
       }
@@ -678,6 +705,9 @@ public sealed partial class Finding : pb::IMessage<Finding>
       if (xss_ != null) {
         size += 1 + pb::CodedOutputStream.ComputeMessageSize(Xss);
       }
+      if (xxe_ != null) {
+        size += 2 + pb::CodedOutputStream.ComputeMessageSize(Xxe);
+      }
       if (_unknownFields != null) {
         size += _unknownFields.CalculateSize();
       }
@@ -759,6 +789,12 @@ public sealed partial class Finding : pb::IMessage<Finding>
         }
         Xss.MergeFrom(other.Xss);
       }
+      if (other.xxe_ != null) {
+        if (xxe_ == null) {
+          Xxe = new global::Google.Cloud.WebSecurityScanner.V1.Xxe();
+        }
+        Xxe.MergeFrom(other.Xxe);
+      }
       _unknownFields = pb::UnknownFieldSet.MergeFrom(_unknownFields, other._unknownFields);
     }
 
@@ -860,6 +896,13 @@ public sealed partial class Finding : pb::IMessage<Finding>
             Severity = (global::Google.Cloud.WebSecurityScanner.V1.Finding.Types.Severity) input.ReadEnum();
             break;
           }
+          case 146: {
+            if (xxe_ == null) {
+              Xxe = new global::Google.Cloud.WebSecurityScanner.V1.Xxe();
+            }
+            input.ReadMessage(Xxe);
+            break;
+          }
         }
       }
     #endif
@@ -961,6 +1004,13 @@ public sealed partial class Finding : pb::IMessage<Finding>
             Severity = (global::Google.Cloud.WebSecurityScanner.V1.Finding.Types.Severity) input.ReadEnum();
             break;
           }
+          case 146: {
+            if (xxe_ == null) {
+              Xxe = new global::Google.Cloud.WebSecurityScanner.V1.Xxe();
+            }
+            input.ReadMessage(Xxe);
+            break;
+          }
         }
       }
     }
diff --git a/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/FindingAddon.g.cs b/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/FindingAddon.g.cs
index 527a70f398ab..fc66e6d13de3 100644
--- a/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/FindingAddon.g.cs
+++ b/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/FindingAddon.g.cs
@@ -47,13 +47,16 @@ public static partial class FindingAddonReflection {
             "RVRFUlMQCBIQCgxVUkxfRlJBR01FTlQQCRIQCgxIVE1MX0NPTU1FTlQQChIT",
             "Cg9QT1NUX1BBUkFNRVRFUlMQCxIMCghQUk9UT0NPTBAMEg4KClNUT1JFRF9Y",
             "U1MQDRIPCgtTQU1FX09SSUdJThAOEhkKFVVTRVJfQ09OVFJPTExBQkxFX1VS",
-            "TBAPQoUCCiZjb20uZ29vZ2xlLmNsb3VkLndlYnNlY3VyaXR5c2Nhbm5lci52",
-            "MUIRRmluZGluZ0FkZG9uUHJvdG9QAVpUZ29vZ2xlLmdvbGFuZy5vcmcvZ2Vu",
-            "cHJvdG8vZ29vZ2xlYXBpcy9jbG91ZC93ZWJzZWN1cml0eXNjYW5uZXIvdjE7",
-            "d2Vic2VjdXJpdHlzY2FubmVyqgIiR29vZ2xlLkNsb3VkLldlYlNlY3VyaXR5",
-            "U2Nhbm5lci5WMcoCIkdvb2dsZVxDbG91ZFxXZWJTZWN1cml0eVNjYW5uZXJc",
-            "VjHqAiVHb29nbGU6OkNsb3VkOjpXZWJTZWN1cml0eVNjYW5uZXI6OlYxYgZw",
-            "cm90bzM="));
+            "TBAPIqkBCgNYeGUSFQoNcGF5bG9hZF92YWx1ZRgBIAEoCRJKChBwYXlsb2Fk",
+            "X2xvY2F0aW9uGAIgASgOMjAuZ29vZ2xlLmNsb3VkLndlYnNlY3VyaXR5c2Nh",
+            "bm5lci52MS5YeGUuTG9jYXRpb24iPwoITG9jYXRpb24SGAoUTE9DQVRJT05f",
+            "VU5TUEVDSUZJRUQQABIZChVDT01QTEVURV9SRVFVRVNUX0JPRFkQAUKFAgom",
+            "Y29tLmdvb2dsZS5jbG91ZC53ZWJzZWN1cml0eXNjYW5uZXIudjFCEUZpbmRp",
+            "bmdBZGRvblByb3RvUAFaVGdvb2dsZS5nb2xhbmcub3JnL2dlbnByb3RvL2dv",
+            "b2dsZWFwaXMvY2xvdWQvd2Vic2VjdXJpdHlzY2FubmVyL3YxO3dlYnNlY3Vy",
+            "aXR5c2Nhbm5lcqoCIkdvb2dsZS5DbG91ZC5XZWJTZWN1cml0eVNjYW5uZXIu",
+            "VjHKAiJHb29nbGVcQ2xvdWRcV2ViU2VjdXJpdHlTY2FubmVyXFYx6gIlR29v",
+            "Z2xlOjpDbG91ZDo6V2ViU2VjdXJpdHlTY2FubmVyOjpWMWIGcHJvdG8z"));
       descriptor = pbr::FileDescriptor.FromGeneratedCode(descriptorData,
           new pbr::FileDescriptor[] { },
           new pbr::GeneratedClrTypeInfo(null, null, new pbr::GeneratedClrTypeInfo[] {
@@ -62,7 +65,8 @@ public static partial class FindingAddonReflection {
             new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.ViolatingResource), global::Google.Cloud.WebSecurityScanner.V1.ViolatingResource.Parser, new[]{ "ContentType", "ResourceUrl" }, null, null, null, null),
             new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.VulnerableParameters), global::Google.Cloud.WebSecurityScanner.V1.VulnerableParameters.Parser, new[]{ "ParameterNames" }, null, null, null, null),
             new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.VulnerableHeaders), global::Google.Cloud.WebSecurityScanner.V1.VulnerableHeaders.Parser, new[]{ "Headers", "MissingHeaders" }, null, null, null, new pbr::GeneratedClrTypeInfo[] { new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.VulnerableHeaders.Types.Header), global::Google.Cloud.WebSecurityScanner.V1.VulnerableHeaders.Types.Header.Parser, new[]{ "Name", "Value" }, null, null, null, null)}),
-            new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.Xss), global::Google.Cloud.WebSecurityScanner.V1.Xss.Parser, new[]{ "StackTraces", "ErrorMessage", "AttackVector", "StoredXssSeedingUrl" }, null, new[]{ typeof(global::Google.Cloud.WebSecurityScanner.V1.Xss.Types.AttackVector) }, null, null)
+            new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.Xss), global::Google.Cloud.WebSecurityScanner.V1.Xss.Parser, new[]{ "StackTraces", "ErrorMessage", "AttackVector", "StoredXssSeedingUrl" }, null, new[]{ typeof(global::Google.Cloud.WebSecurityScanner.V1.Xss.Types.AttackVector) }, null, null),
+            new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.Xxe), global::Google.Cloud.WebSecurityScanner.V1.Xxe.Parser, new[]{ "PayloadValue", "PayloadLocation" }, null, new[]{ typeof(global::Google.Cloud.WebSecurityScanner.V1.Xxe.Types.Location) }, null, null)
           }));
     }
     #endregion
@@ -1816,6 +1820,264 @@ public enum AttackVector {
 
   }
 
+  /// <summary>
+  /// Information reported for an XXE.
+  /// </summary>
+  public sealed partial class Xxe : pb::IMessage<Xxe>
+  #if !GOOGLE_PROTOBUF_REFSTRUCT_COMPATIBILITY_MODE
+      , pb::IBufferMessage
+  #endif
+  {
+    private static readonly pb::MessageParser<Xxe> _parser = new pb::MessageParser<Xxe>(() => new Xxe());
+    private pb::UnknownFieldSet _unknownFields;
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public static pb::MessageParser<Xxe> Parser { get { return _parser; } }
+
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public static pbr::MessageDescriptor Descriptor {
+      get { return global::Google.Cloud.WebSecurityScanner.V1.FindingAddonReflection.Descriptor.MessageTypes[6]; }
+    }
+
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    pbr::MessageDescriptor pb::IMessage.Descriptor {
+      get { return Descriptor; }
+    }
+
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public Xxe() {
+      OnConstruction();
+    }
+
+    partial void OnConstruction();
+
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public Xxe(Xxe other) : this() {
+      payloadValue_ = other.payloadValue_;
+      payloadLocation_ = other.payloadLocation_;
+      _unknownFields = pb::UnknownFieldSet.Clone(other._unknownFields);
+    }
+
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public Xxe Clone() {
+      return new Xxe(this);
+    }
+
+    /// <summary>Field number for the "payload_value" field.</summary>
+    public const int PayloadValueFieldNumber = 1;
+    private string payloadValue_ = "";
+    /// <summary>
+    /// The XML string that triggered the XXE vulnerability. Non-payload values
+    /// might be redacted.
+    /// </summary>
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public string PayloadValue {
+      get { return payloadValue_; }
+      set {
+        payloadValue_ = pb::ProtoPreconditions.CheckNotNull(value, "value");
+      }
+    }
+
+    /// <summary>Field number for the "payload_location" field.</summary>
+    public const int PayloadLocationFieldNumber = 2;
+    private global::Google.Cloud.WebSecurityScanner.V1.Xxe.Types.Location payloadLocation_ = global::Google.Cloud.WebSecurityScanner.V1.Xxe.Types.Location.Unspecified;
+    /// <summary>
+    /// Location within the request where the payload was placed.
+    /// </summary>
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public global::Google.Cloud.WebSecurityScanner.V1.Xxe.Types.Location PayloadLocation {
+      get { return payloadLocation_; }
+      set {
+        payloadLocation_ = value;
+      }
+    }
+
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public override bool Equals(object other) {
+      return Equals(other as Xxe);
+    }
+
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public bool Equals(Xxe other) {
+      if (ReferenceEquals(other, null)) {
+        return false;
+      }
+      if (ReferenceEquals(other, this)) {
+        return true;
+      }
+      if (PayloadValue != other.PayloadValue) return false;
+      if (PayloadLocation != other.PayloadLocation) return false;
+      return Equals(_unknownFields, other._unknownFields);
+    }
+
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public override int GetHashCode() {
+      int hash = 1;
+      if (PayloadValue.Length != 0) hash ^= PayloadValue.GetHashCode();
+      if (PayloadLocation != global::Google.Cloud.WebSecurityScanner.V1.Xxe.Types.Location.Unspecified) hash ^= PayloadLocation.GetHashCode();
+      if (_unknownFields != null) {
+        hash ^= _unknownFields.GetHashCode();
+      }
+      return hash;
+    }
+
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public override string ToString() {
+      return pb::JsonFormatter.ToDiagnosticString(this);
+    }
+
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public void WriteTo(pb::CodedOutputStream output) {
+    #if !GOOGLE_PROTOBUF_REFSTRUCT_COMPATIBILITY_MODE
+      output.WriteRawMessage(this);
+    #else
+      if (PayloadValue.Length != 0) {
+        output.WriteRawTag(10);
+        output.WriteString(PayloadValue);
+      }
+      if (PayloadLocation != global::Google.Cloud.WebSecurityScanner.V1.Xxe.Types.Location.Unspecified) {
+        output.WriteRawTag(16);
+        output.WriteEnum((int) PayloadLocation);
+      }
+      if (_unknownFields != null) {
+        _unknownFields.WriteTo(output);
+      }
+    #endif
+    }
+
+    #if !GOOGLE_PROTOBUF_REFSTRUCT_COMPATIBILITY_MODE
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    void pb::IBufferMessage.InternalWriteTo(ref pb::WriteContext output) {
+      if (PayloadValue.Length != 0) {
+        output.WriteRawTag(10);
+        output.WriteString(PayloadValue);
+      }
+      if (PayloadLocation != global::Google.Cloud.WebSecurityScanner.V1.Xxe.Types.Location.Unspecified) {
+        output.WriteRawTag(16);
+        output.WriteEnum((int) PayloadLocation);
+      }
+      if (_unknownFields != null) {
+        _unknownFields.WriteTo(ref output);
+      }
+    }
+    #endif
+
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public int CalculateSize() {
+      int size = 0;
+      if (PayloadValue.Length != 0) {
+        size += 1 + pb::CodedOutputStream.ComputeStringSize(PayloadValue);
+      }
+      if (PayloadLocation != global::Google.Cloud.WebSecurityScanner.V1.Xxe.Types.Location.Unspecified) {
+        size += 1 + pb::CodedOutputStream.ComputeEnumSize((int) PayloadLocation);
+      }
+      if (_unknownFields != null) {
+        size += _unknownFields.CalculateSize();
+      }
+      return size;
+    }
+
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public void MergeFrom(Xxe other) {
+      if (other == null) {
+        return;
+      }
+      if (other.PayloadValue.Length != 0) {
+        PayloadValue = other.PayloadValue;
+      }
+      if (other.PayloadLocation != global::Google.Cloud.WebSecurityScanner.V1.Xxe.Types.Location.Unspecified) {
+        PayloadLocation = other.PayloadLocation;
+      }
+      _unknownFields = pb::UnknownFieldSet.MergeFrom(_unknownFields, other._unknownFields);
+    }
+
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public void MergeFrom(pb::CodedInputStream input) {
+    #if !GOOGLE_PROTOBUF_REFSTRUCT_COMPATIBILITY_MODE
+      input.ReadRawMessage(this);
+    #else
+      uint tag;
+      while ((tag = input.ReadTag()) != 0) {
+        switch(tag) {
+          default:
+            _unknownFields = pb::UnknownFieldSet.MergeFieldFrom(_unknownFields, input);
+            break;
+          case 10: {
+            PayloadValue = input.ReadString();
+            break;
+          }
+          case 16: {
+            PayloadLocation = (global::Google.Cloud.WebSecurityScanner.V1.Xxe.Types.Location) input.ReadEnum();
+            break;
+          }
+        }
+      }
+    #endif
+    }
+
+    #if !GOOGLE_PROTOBUF_REFSTRUCT_COMPATIBILITY_MODE
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    void pb::IBufferMessage.InternalMergeFrom(ref pb::ParseContext input) {
+      uint tag;
+      while ((tag = input.ReadTag()) != 0) {
+        switch(tag) {
+          default:
+            _unknownFields = pb::UnknownFieldSet.MergeFieldFrom(_unknownFields, ref input);
+            break;
+          case 10: {
+            PayloadValue = input.ReadString();
+            break;
+          }
+          case 16: {
+            PayloadLocation = (global::Google.Cloud.WebSecurityScanner.V1.Xxe.Types.Location) input.ReadEnum();
+            break;
+          }
+        }
+      }
+    }
+    #endif
+
+    #region Nested types
+    /// <summary>Container for nested types declared in the Xxe message type.</summary>
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public static partial class Types {
+      /// <summary>
+      /// Locations within a request where XML was substituted.
+      /// </summary>
+      public enum Location {
+        /// <summary>
+        /// Unknown Location.
+        /// </summary>
+        [pbr::OriginalName("LOCATION_UNSPECIFIED")] Unspecified = 0,
+        /// <summary>
+        /// The XML payload replaced the complete request body.
+        /// </summary>
+        [pbr::OriginalName("COMPLETE_REQUEST_BODY")] CompleteRequestBody = 1,
+      }
+
+    }
+    #endregion
+
+  }
+
   #endregion
 
 }
diff --git a/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/ScanConfig.g.cs b/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/ScanConfig.g.cs
index 21b1f771a705..afff7ffc3da9 100644
--- a/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/ScanConfig.g.cs
+++ b/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/ScanConfig.g.cs
@@ -27,7 +27,7 @@ public static partial class ScanConfigReflection {
             "CjRnb29nbGUvY2xvdWQvd2Vic2VjdXJpdHlzY2FubmVyL3YxL3NjYW5fY29u",
             "ZmlnLnByb3RvEiJnb29nbGUuY2xvdWQud2Vic2VjdXJpdHlzY2FubmVyLnYx",
             "Gh9nb29nbGUvYXBpL2ZpZWxkX2JlaGF2aW9yLnByb3RvGh9nb29nbGUvcHJv",
-            "dG9idWYvdGltZXN0YW1wLnByb3RvIpkNCgpTY2FuQ29uZmlnEgwKBG5hbWUY",
+            "dG9idWYvdGltZXN0YW1wLnByb3RvIsQNCgpTY2FuQ29uZmlnEgwKBG5hbWUY",
             "ASABKAkSFAoMZGlzcGxheV9uYW1lGAIgASgJEg8KB21heF9xcHMYAyABKAUS",
             "FQoNc3RhcnRpbmdfdXJscxgEIAMoCRJVCg5hdXRoZW50aWNhdGlvbhgFIAEo",
             "CzI9Lmdvb2dsZS5jbG91ZC53ZWJzZWN1cml0eXNjYW5uZXIudjEuU2NhbkNv",
@@ -40,42 +40,43 @@ public static partial class ScanConfigReflection {
             "c2Nhbm5lci52MS5TY2FuQ29uZmlnLkV4cG9ydFRvU2VjdXJpdHlDb21tYW5k",
             "Q2VudGVyEkwKCnJpc2tfbGV2ZWwYDCABKA4yOC5nb29nbGUuY2xvdWQud2Vi",
             "c2VjdXJpdHlzY2FubmVyLnYxLlNjYW5Db25maWcuUmlza0xldmVsEhQKDG1h",
-            "bmFnZWRfc2NhbhgNIAEoCBIWCg5zdGF0aWNfaXBfc2NhbhgOIAEoCBrPBQoO",
-            "QXV0aGVudGljYXRpb24SZQoOZ29vZ2xlX2FjY291bnQYASABKAsySy5nb29n",
-            "bGUuY2xvdWQud2Vic2VjdXJpdHlzY2FubmVyLnYxLlNjYW5Db25maWcuQXV0",
-            "aGVudGljYXRpb24uR29vZ2xlQWNjb3VudEgAEmUKDmN1c3RvbV9hY2NvdW50",
-            "GAIgASgLMksuZ29vZ2xlLmNsb3VkLndlYnNlY3VyaXR5c2Nhbm5lci52MS5T",
-            "Y2FuQ29uZmlnLkF1dGhlbnRpY2F0aW9uLkN1c3RvbUFjY291bnRIABJlCg5p",
-            "YXBfY3JlZGVudGlhbBgEIAEoCzJLLmdvb2dsZS5jbG91ZC53ZWJzZWN1cml0",
-            "eXNjYW5uZXIudjEuU2NhbkNvbmZpZy5BdXRoZW50aWNhdGlvbi5JYXBDcmVk",
-            "ZW50aWFsSAAaMwoNR29vZ2xlQWNjb3VudBIQCgh1c2VybmFtZRgBIAEoCRIQ",
-            "CghwYXNzd29yZBgCIAEoCRpGCg1DdXN0b21BY2NvdW50EhAKCHVzZXJuYW1l",
-            "GAEgASgJEhAKCHBhc3N3b3JkGAIgASgJEhEKCWxvZ2luX3VybBgDIAEoCRr4",
-            "AQoNSWFwQ3JlZGVudGlhbBKOAQodaWFwX3Rlc3Rfc2VydmljZV9hY2NvdW50",
-            "X2luZm8YASABKAsyZS5nb29nbGUuY2xvdWQud2Vic2VjdXJpdHlzY2FubmVy",
-            "LnYxLlNjYW5Db25maWcuQXV0aGVudGljYXRpb24uSWFwQ3JlZGVudGlhbC5J",
-            "YXBUZXN0U2VydmljZUFjY291bnRJbmZvSAAaQwoZSWFwVGVzdFNlcnZpY2VB",
-            "Y2NvdW50SW5mbxImChl0YXJnZXRfYXVkaWVuY2VfY2xpZW50X2lkGAEgASgJ",
-            "QgPgQQJCEQoPaWFwX2NyZWRlbnRpYWxzQhAKDmF1dGhlbnRpY2F0aW9uGl0K",
-            "CFNjaGVkdWxlEjEKDXNjaGVkdWxlX3RpbWUYASABKAsyGi5nb29nbGUucHJv",
-            "dG9idWYuVGltZXN0YW1wEh4KFmludGVydmFsX2R1cmF0aW9uX2RheXMYAiAB",
-            "KAUiYAoJVXNlckFnZW50EhoKFlVTRVJfQUdFTlRfVU5TUEVDSUZJRUQQABIQ",
-            "CgxDSFJPTUVfTElOVVgQARISCg5DSFJPTUVfQU5EUk9JRBACEhEKDVNBRkFS",
-            "SV9JUEhPTkUQAyI8CglSaXNrTGV2ZWwSGgoWUklTS19MRVZFTF9VTlNQRUNJ",
-            "RklFRBAAEgoKBk5PUk1BTBABEgcKA0xPVxACIm0KHUV4cG9ydFRvU2VjdXJp",
-            "dHlDb21tYW5kQ2VudGVyEjEKLUVYUE9SVF9UT19TRUNVUklUWV9DT01NQU5E",
-            "X0NFTlRFUl9VTlNQRUNJRklFRBAAEgsKB0VOQUJMRUQQARIMCghESVNBQkxF",
-            "RBACQoMCCiZjb20uZ29vZ2xlLmNsb3VkLndlYnNlY3VyaXR5c2Nhbm5lci52",
-            "MUIPU2NhbkNvbmZpZ1Byb3RvUAFaVGdvb2dsZS5nb2xhbmcub3JnL2dlbnBy",
-            "b3RvL2dvb2dsZWFwaXMvY2xvdWQvd2Vic2VjdXJpdHlzY2FubmVyL3YxO3dl",
-            "YnNlY3VyaXR5c2Nhbm5lcqoCIkdvb2dsZS5DbG91ZC5XZWJTZWN1cml0eVNj",
-            "YW5uZXIuVjHKAiJHb29nbGVcQ2xvdWRcV2ViU2VjdXJpdHlTY2FubmVyXFYx",
-            "6gIlR29vZ2xlOjpDbG91ZDo6V2ViU2VjdXJpdHlTY2FubmVyOjpWMWIGcHJv",
-            "dG8z"));
+            "bmFnZWRfc2NhbhgNIAEoCBIWCg5zdGF0aWNfaXBfc2NhbhgOIAEoCBIhChlp",
+            "Z25vcmVfaHR0cF9zdGF0dXNfZXJyb3JzGA8gASgIGtcFCg5BdXRoZW50aWNh",
+            "dGlvbhJpCg5nb29nbGVfYWNjb3VudBgBIAEoCzJLLmdvb2dsZS5jbG91ZC53",
+            "ZWJzZWN1cml0eXNjYW5uZXIudjEuU2NhbkNvbmZpZy5BdXRoZW50aWNhdGlv",
+            "bi5Hb29nbGVBY2NvdW50QgIYAUgAEmUKDmN1c3RvbV9hY2NvdW50GAIgASgL",
+            "MksuZ29vZ2xlLmNsb3VkLndlYnNlY3VyaXR5c2Nhbm5lci52MS5TY2FuQ29u",
+            "ZmlnLkF1dGhlbnRpY2F0aW9uLkN1c3RvbUFjY291bnRIABJlCg5pYXBfY3Jl",
+            "ZGVudGlhbBgEIAEoCzJLLmdvb2dsZS5jbG91ZC53ZWJzZWN1cml0eXNjYW5u",
+            "ZXIudjEuU2NhbkNvbmZpZy5BdXRoZW50aWNhdGlvbi5JYXBDcmVkZW50aWFs",
+            "SAAaNwoNR29vZ2xlQWNjb3VudBIQCgh1c2VybmFtZRgBIAEoCRIQCghwYXNz",
+            "d29yZBgCIAEoCToCGAEaRgoNQ3VzdG9tQWNjb3VudBIQCgh1c2VybmFtZRgB",
+            "IAEoCRIQCghwYXNzd29yZBgCIAEoCRIRCglsb2dpbl91cmwYAyABKAka+AEK",
+            "DUlhcENyZWRlbnRpYWwSjgEKHWlhcF90ZXN0X3NlcnZpY2VfYWNjb3VudF9p",
+            "bmZvGAEgASgLMmUuZ29vZ2xlLmNsb3VkLndlYnNlY3VyaXR5c2Nhbm5lci52",
+            "MS5TY2FuQ29uZmlnLkF1dGhlbnRpY2F0aW9uLklhcENyZWRlbnRpYWwuSWFw",
+            "VGVzdFNlcnZpY2VBY2NvdW50SW5mb0gAGkMKGUlhcFRlc3RTZXJ2aWNlQWNj",
+            "b3VudEluZm8SJgoZdGFyZ2V0X2F1ZGllbmNlX2NsaWVudF9pZBgBIAEoCUID",
+            "4EECQhEKD2lhcF9jcmVkZW50aWFsc0IQCg5hdXRoZW50aWNhdGlvbhpdCghT",
+            "Y2hlZHVsZRIxCg1zY2hlZHVsZV90aW1lGAEgASgLMhouZ29vZ2xlLnByb3Rv",
+            "YnVmLlRpbWVzdGFtcBIeChZpbnRlcnZhbF9kdXJhdGlvbl9kYXlzGAIgASgF",
+            "ImAKCVVzZXJBZ2VudBIaChZVU0VSX0FHRU5UX1VOU1BFQ0lGSUVEEAASEAoM",
+            "Q0hST01FX0xJTlVYEAESEgoOQ0hST01FX0FORFJPSUQQAhIRCg1TQUZBUklf",
+            "SVBIT05FEAMiPAoJUmlza0xldmVsEhoKFlJJU0tfTEVWRUxfVU5TUEVDSUZJ",
+            "RUQQABIKCgZOT1JNQUwQARIHCgNMT1cQAiJtCh1FeHBvcnRUb1NlY3VyaXR5",
+            "Q29tbWFuZENlbnRlchIxCi1FWFBPUlRfVE9fU0VDVVJJVFlfQ09NTUFORF9D",
+            "RU5URVJfVU5TUEVDSUZJRUQQABILCgdFTkFCTEVEEAESDAoIRElTQUJMRUQQ",
+            "AkKDAgomY29tLmdvb2dsZS5jbG91ZC53ZWJzZWN1cml0eXNjYW5uZXIudjFC",
+            "D1NjYW5Db25maWdQcm90b1ABWlRnb29nbGUuZ29sYW5nLm9yZy9nZW5wcm90",
+            "by9nb29nbGVhcGlzL2Nsb3VkL3dlYnNlY3VyaXR5c2Nhbm5lci92MTt3ZWJz",
+            "ZWN1cml0eXNjYW5uZXKqAiJHb29nbGUuQ2xvdWQuV2ViU2VjdXJpdHlTY2Fu",
+            "bmVyLlYxygIiR29vZ2xlXENsb3VkXFdlYlNlY3VyaXR5U2Nhbm5lclxWMeoC",
+            "JUdvb2dsZTo6Q2xvdWQ6OldlYlNlY3VyaXR5U2Nhbm5lcjo6VjFiBnByb3Rv",
+            "Mw=="));
       descriptor = pbr::FileDescriptor.FromGeneratedCode(descriptorData,
           new pbr::FileDescriptor[] { global::Google.Api.FieldBehaviorReflection.Descriptor, global::Google.Protobuf.WellKnownTypes.TimestampReflection.Descriptor, },
           new pbr::GeneratedClrTypeInfo(null, null, new pbr::GeneratedClrTypeInfo[] {
-            new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.ScanConfig), global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Parser, new[]{ "Name", "DisplayName", "MaxQps", "StartingUrls", "Authentication", "UserAgent", "BlacklistPatterns", "Schedule", "ExportToSecurityCommandCenter", "RiskLevel", "ManagedScan", "StaticIpScan" }, null, new[]{ typeof(global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.UserAgent), typeof(global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.RiskLevel), typeof(global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.ExportToSecurityCommandCenter) }, null, new pbr::GeneratedClrTypeInfo[] { new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.Authentication), global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.Authentication.Parser, new[]{ "GoogleAccount", "CustomAccount", "IapCredential" }, new[]{ "Authentication" }, null, null, new pbr::GeneratedClrTypeInfo[] { new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.Authentication.Types.GoogleAccount), global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.Authentication.Types.GoogleAccount.Parser, new[]{ "Username", "Password" }, null, null, null, null),
+            new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.ScanConfig), global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Parser, new[]{ "Name", "DisplayName", "MaxQps", "StartingUrls", "Authentication", "UserAgent", "BlacklistPatterns", "Schedule", "ExportToSecurityCommandCenter", "RiskLevel", "ManagedScan", "StaticIpScan", "IgnoreHttpStatusErrors" }, null, new[]{ typeof(global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.UserAgent), typeof(global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.RiskLevel), typeof(global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.ExportToSecurityCommandCenter) }, null, new pbr::GeneratedClrTypeInfo[] { new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.Authentication), global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.Authentication.Parser, new[]{ "GoogleAccount", "CustomAccount", "IapCredential" }, new[]{ "Authentication" }, null, null, new pbr::GeneratedClrTypeInfo[] { new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.Authentication.Types.GoogleAccount), global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.Authentication.Types.GoogleAccount.Parser, new[]{ "Username", "Password" }, null, null, null, null),
             new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.Authentication.Types.CustomAccount), global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.Authentication.Types.CustomAccount.Parser, new[]{ "Username", "Password", "LoginUrl" }, null, null, null, null),
             new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.Authentication.Types.IapCredential), global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.Authentication.Types.IapCredential.Parser, new[]{ "IapTestServiceAccountInfo" }, new[]{ "IapCredentials" }, null, null, new pbr::GeneratedClrTypeInfo[] { new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.Authentication.Types.IapCredential.Types.IapTestServiceAccountInfo), global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.Authentication.Types.IapCredential.Types.IapTestServiceAccountInfo.Parser, new[]{ "TargetAudienceClientId" }, null, null, null, null)})}),
             new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.Schedule), global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.Schedule.Parser, new[]{ "ScheduleTime", "IntervalDurationDays" }, null, null, null, null)})
@@ -134,6 +135,7 @@ public sealed partial class ScanConfig : pb::IMessage<ScanConfig>
       riskLevel_ = other.riskLevel_;
       managedScan_ = other.managedScan_;
       staticIpScan_ = other.staticIpScan_;
+      ignoreHttpStatusErrors_ = other.ignoreHttpStatusErrors_;
       _unknownFields = pb::UnknownFieldSet.Clone(other._unknownFields);
     }
 
@@ -331,6 +333,21 @@ public sealed partial class ScanConfig : pb::IMessage<ScanConfig>
       }
     }
 
+    /// <summary>Field number for the "ignore_http_status_errors" field.</summary>
+    public const int IgnoreHttpStatusErrorsFieldNumber = 15;
+    private bool ignoreHttpStatusErrors_;
+    /// <summary>
+    /// Whether to keep scanning even if most requests return HTTP error codes.
+    /// </summary>
+    [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
+    [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
+    public bool IgnoreHttpStatusErrors {
+      get { return ignoreHttpStatusErrors_; }
+      set {
+        ignoreHttpStatusErrors_ = value;
+      }
+    }
+
     [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
     [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
     public override bool Equals(object other) {
@@ -358,6 +375,7 @@ public sealed partial class ScanConfig : pb::IMessage<ScanConfig>
       if (RiskLevel != other.RiskLevel) return false;
       if (ManagedScan != other.ManagedScan) return false;
       if (StaticIpScan != other.StaticIpScan) return false;
+      if (IgnoreHttpStatusErrors != other.IgnoreHttpStatusErrors) return false;
       return Equals(_unknownFields, other._unknownFields);
     }
 
@@ -377,6 +395,7 @@ public sealed partial class ScanConfig : pb::IMessage<ScanConfig>
       if (RiskLevel != global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.RiskLevel.Unspecified) hash ^= RiskLevel.GetHashCode();
       if (ManagedScan != false) hash ^= ManagedScan.GetHashCode();
       if (StaticIpScan != false) hash ^= StaticIpScan.GetHashCode();
+      if (IgnoreHttpStatusErrors != false) hash ^= IgnoreHttpStatusErrors.GetHashCode();
       if (_unknownFields != null) {
         hash ^= _unknownFields.GetHashCode();
       }
@@ -437,6 +456,10 @@ public sealed partial class ScanConfig : pb::IMessage<ScanConfig>
         output.WriteRawTag(112);
         output.WriteBool(StaticIpScan);
       }
+      if (IgnoreHttpStatusErrors != false) {
+        output.WriteRawTag(120);
+        output.WriteBool(IgnoreHttpStatusErrors);
+      }
       if (_unknownFields != null) {
         _unknownFields.WriteTo(output);
       }
@@ -489,6 +512,10 @@ public sealed partial class ScanConfig : pb::IMessage<ScanConfig>
         output.WriteRawTag(112);
         output.WriteBool(StaticIpScan);
       }
+      if (IgnoreHttpStatusErrors != false) {
+        output.WriteRawTag(120);
+        output.WriteBool(IgnoreHttpStatusErrors);
+      }
       if (_unknownFields != null) {
         _unknownFields.WriteTo(ref output);
       }
@@ -531,6 +558,9 @@ public sealed partial class ScanConfig : pb::IMessage<ScanConfig>
       if (StaticIpScan != false) {
         size += 1 + 1;
       }
+      if (IgnoreHttpStatusErrors != false) {
+        size += 1 + 1;
+      }
       if (_unknownFields != null) {
         size += _unknownFields.CalculateSize();
       }
@@ -581,6 +611,9 @@ public sealed partial class ScanConfig : pb::IMessage<ScanConfig>
       if (other.StaticIpScan != false) {
         StaticIpScan = other.StaticIpScan;
       }
+      if (other.IgnoreHttpStatusErrors != false) {
+        IgnoreHttpStatusErrors = other.IgnoreHttpStatusErrors;
+      }
       _unknownFields = pb::UnknownFieldSet.MergeFrom(_unknownFields, other._unknownFields);
     }
 
@@ -650,6 +683,10 @@ public sealed partial class ScanConfig : pb::IMessage<ScanConfig>
             StaticIpScan = input.ReadBool();
             break;
           }
+          case 120: {
+            IgnoreHttpStatusErrors = input.ReadBool();
+            break;
+          }
         }
       }
     #endif
@@ -719,6 +756,10 @@ public sealed partial class ScanConfig : pb::IMessage<ScanConfig>
             StaticIpScan = input.ReadBool();
             break;
           }
+          case 120: {
+            IgnoreHttpStatusErrors = input.ReadBool();
+            break;
+          }
         }
       }
     }
@@ -853,6 +894,7 @@ public sealed partial class Authentication : pb::IMessage<Authentication>
         /// <summary>
         /// Authentication using a Google account.
         /// </summary>
+        [global::System.ObsoleteAttribute]
         [global::System.Diagnostics.DebuggerNonUserCodeAttribute]
         [global::System.CodeDom.Compiler.GeneratedCode("protoc", null)]
         public global::Google.Cloud.WebSecurityScanner.V1.ScanConfig.Types.Authentication.Types.GoogleAccount GoogleAccount {
@@ -1146,6 +1188,7 @@ public static partial class Types {
           /// <summary>
           /// Describes authentication configuration that uses a Google account.
           /// </summary>
+          [global::System.ObsoleteAttribute]
           public sealed partial class GoogleAccount : pb::IMessage<GoogleAccount>
           #if !GOOGLE_PROTOBUF_REFSTRUCT_COMPATIBILITY_MODE
               , pb::IBufferMessage
diff --git a/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/ScanRunErrorTrace.g.cs b/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/ScanRunErrorTrace.g.cs
index 1077cac0cd5d..a79b63252214 100644
--- a/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/ScanRunErrorTrace.g.cs
+++ b/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/ScanRunErrorTrace.g.cs
@@ -348,7 +348,7 @@ public static partial class Types {
       /// <summary>
       /// Output only.
       /// Defines an error reason code.
-      /// Next id: 7
+      /// Next id: 8
       /// </summary>
       public enum Code {
         /// <summary>
diff --git a/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/ScanRunWarningTrace.g.cs b/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/ScanRunWarningTrace.g.cs
index f0e799908965..e08cc1ca5adf 100644
--- a/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/ScanRunWarningTrace.g.cs
+++ b/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/ScanRunWarningTrace.g.cs
@@ -26,18 +26,19 @@ public static partial class ScanRunWarningTraceReflection {
           string.Concat(
             "Cj9nb29nbGUvY2xvdWQvd2Vic2VjdXJpdHlzY2FubmVyL3YxL3NjYW5fcnVu",
             "X3dhcm5pbmdfdHJhY2UucHJvdG8SImdvb2dsZS5jbG91ZC53ZWJzZWN1cml0",
-            "eXNjYW5uZXIudjEi6QEKE1NjYW5SdW5XYXJuaW5nVHJhY2USSgoEY29kZRgB",
+            "eXNjYW5uZXIudjEilQIKE1NjYW5SdW5XYXJuaW5nVHJhY2USSgoEY29kZRgB",
             "IAEoDjI8Lmdvb2dsZS5jbG91ZC53ZWJzZWN1cml0eXNjYW5uZXIudjEuU2Nh",
-            "blJ1bldhcm5pbmdUcmFjZS5Db2RlIoUBCgRDb2RlEhQKEENPREVfVU5TUEVD",
+            "blJ1bldhcm5pbmdUcmFjZS5Db2RlIrEBCgRDb2RlEhQKEENPREVfVU5TUEVD",
             "SUZJRUQQABIeChpJTlNVRkZJQ0lFTlRfQ1JBV0xfUkVTVUxUUxABEhoKFlRP",
             "T19NQU5ZX0NSQVdMX1JFU1VMVFMQAhIXChNUT09fTUFOWV9GVVpaX1RBU0tT",
-            "EAMSEgoOQkxPQ0tFRF9CWV9JQVAQBEKMAgomY29tLmdvb2dsZS5jbG91ZC53",
-            "ZWJzZWN1cml0eXNjYW5uZXIudjFCGFNjYW5SdW5XYXJuaW5nVHJhY2VQcm90",
-            "b1ABWlRnb29nbGUuZ29sYW5nLm9yZy9nZW5wcm90by9nb29nbGVhcGlzL2Ns",
-            "b3VkL3dlYnNlY3VyaXR5c2Nhbm5lci92MTt3ZWJzZWN1cml0eXNjYW5uZXKq",
-            "AiJHb29nbGUuQ2xvdWQuV2ViU2VjdXJpdHlTY2FubmVyLlYxygIiR29vZ2xl",
-            "XENsb3VkXFdlYlNlY3VyaXR5U2Nhbm5lclxWMeoCJUdvb2dsZTo6Q2xvdWQ6",
-            "OldlYlNlY3VyaXR5U2Nhbm5lcjo6VjFiBnByb3RvMw=="));
+            "EAMSEgoOQkxPQ0tFRF9CWV9JQVAQBBIqCiZOT19TVEFSVElOR19VUkxfRk9V",
+            "TkRfRk9SX01BTkFHRURfU0NBThAFQowCCiZjb20uZ29vZ2xlLmNsb3VkLndl",
+            "YnNlY3VyaXR5c2Nhbm5lci52MUIYU2NhblJ1bldhcm5pbmdUcmFjZVByb3Rv",
+            "UAFaVGdvb2dsZS5nb2xhbmcub3JnL2dlbnByb3RvL2dvb2dsZWFwaXMvY2xv",
+            "dWQvd2Vic2VjdXJpdHlzY2FubmVyL3YxO3dlYnNlY3VyaXR5c2Nhbm5lcqoC",
+            "Ikdvb2dsZS5DbG91ZC5XZWJTZWN1cml0eVNjYW5uZXIuVjHKAiJHb29nbGVc",
+            "Q2xvdWRcV2ViU2VjdXJpdHlTY2FubmVyXFYx6gIlR29vZ2xlOjpDbG91ZDo6",
+            "V2ViU2VjdXJpdHlTY2FubmVyOjpWMWIGcHJvdG8z"));
       descriptor = pbr::FileDescriptor.FromGeneratedCode(descriptorData,
           new pbr::FileDescriptor[] { },
           new pbr::GeneratedClrTypeInfo(null, null, new pbr::GeneratedClrTypeInfo[] {
@@ -279,6 +280,10 @@ public enum Code {
         /// Indicates that a scan is blocked by IAP.
         /// </summary>
         [pbr::OriginalName("BLOCKED_BY_IAP")] BlockedByIap = 4,
+        /// <summary>
+        /// Indicates that no seeds is found for a scan
+        /// </summary>
+        [pbr::OriginalName("NO_STARTING_URL_FOUND_FOR_MANAGED_SCAN")] NoStartingUrlFoundForManagedScan = 5,
       }
 
     }
diff --git a/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/WebSecurityScanner.g.cs b/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/WebSecurityScanner.g.cs
index 121ca3b107c5..1db9139ffc3a 100644
--- a/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/WebSecurityScanner.g.cs
+++ b/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/WebSecurityScanner.g.cs
@@ -26,15 +26,15 @@ public static partial class WebSecurityScannerReflection {
           string.Concat(
             "Cj1nb29nbGUvY2xvdWQvd2Vic2VjdXJpdHlzY2FubmVyL3YxL3dlYl9zZWN1",
             "cml0eV9zY2FubmVyLnByb3RvEiJnb29nbGUuY2xvdWQud2Vic2VjdXJpdHlz",
-            "Y2FubmVyLnYxGhxnb29nbGUvYXBpL2Fubm90YXRpb25zLnByb3RvGjRnb29n",
-            "bGUvY2xvdWQvd2Vic2VjdXJpdHlzY2FubmVyL3YxL2NyYXdsZWRfdXJsLnBy",
-            "b3RvGjBnb29nbGUvY2xvdWQvd2Vic2VjdXJpdHlzY2FubmVyL3YxL2ZpbmRp",
-            "bmcucHJvdG8aO2dvb2dsZS9jbG91ZC93ZWJzZWN1cml0eXNjYW5uZXIvdjEv",
-            "ZmluZGluZ190eXBlX3N0YXRzLnByb3RvGjRnb29nbGUvY2xvdWQvd2Vic2Vj",
-            "dXJpdHlzY2FubmVyL3YxL3NjYW5fY29uZmlnLnByb3RvGjFnb29nbGUvY2xv",
-            "dWQvd2Vic2VjdXJpdHlzY2FubmVyL3YxL3NjYW5fcnVuLnByb3RvGhtnb29n",
-            "bGUvcHJvdG9idWYvZW1wdHkucHJvdG8aIGdvb2dsZS9wcm90b2J1Zi9maWVs",
-            "ZF9tYXNrLnByb3RvGhdnb29nbGUvYXBpL2NsaWVudC5wcm90byJuChdDcmVh",
+            "Y2FubmVyLnYxGhxnb29nbGUvYXBpL2Fubm90YXRpb25zLnByb3RvGhdnb29n",
+            "bGUvYXBpL2NsaWVudC5wcm90bxo0Z29vZ2xlL2Nsb3VkL3dlYnNlY3VyaXR5",
+            "c2Nhbm5lci92MS9jcmF3bGVkX3VybC5wcm90bxowZ29vZ2xlL2Nsb3VkL3dl",
+            "YnNlY3VyaXR5c2Nhbm5lci92MS9maW5kaW5nLnByb3RvGjtnb29nbGUvY2xv",
+            "dWQvd2Vic2VjdXJpdHlzY2FubmVyL3YxL2ZpbmRpbmdfdHlwZV9zdGF0cy5w",
+            "cm90bxo0Z29vZ2xlL2Nsb3VkL3dlYnNlY3VyaXR5c2Nhbm5lci92MS9zY2Fu",
+            "X2NvbmZpZy5wcm90bxoxZ29vZ2xlL2Nsb3VkL3dlYnNlY3VyaXR5c2Nhbm5l",
+            "ci92MS9zY2FuX3J1bi5wcm90bxobZ29vZ2xlL3Byb3RvYnVmL2VtcHR5LnBy",
+            "b3RvGiBnb29nbGUvcHJvdG9idWYvZmllbGRfbWFzay5wcm90byJuChdDcmVh",
             "dGVTY2FuQ29uZmlnUmVxdWVzdBIOCgZwYXJlbnQYASABKAkSQwoLc2Nhbl9j",
             "b25maWcYAiABKAsyLi5nb29nbGUuY2xvdWQud2Vic2VjdXJpdHlzY2FubmVy",
             "LnYxLlNjYW5Db25maWciJwoXRGVsZXRlU2NhbkNvbmZpZ1JlcXVlc3QSDAoE",
@@ -131,7 +131,7 @@ public static partial class WebSecurityScannerReflection {
             "V2ViU2VjdXJpdHlTY2FubmVyXFYx6gIlR29vZ2xlOjpDbG91ZDo6V2ViU2Vj",
             "dXJpdHlTY2FubmVyOjpWMWIGcHJvdG8z"));
       descriptor = pbr::FileDescriptor.FromGeneratedCode(descriptorData,
-          new pbr::FileDescriptor[] { global::Google.Api.AnnotationsReflection.Descriptor, global::Google.Cloud.WebSecurityScanner.V1.CrawledUrlReflection.Descriptor, global::Google.Cloud.WebSecurityScanner.V1.FindingReflection.Descriptor, global::Google.Cloud.WebSecurityScanner.V1.FindingTypeStatsReflection.Descriptor, global::Google.Cloud.WebSecurityScanner.V1.ScanConfigReflection.Descriptor, global::Google.Cloud.WebSecurityScanner.V1.ScanRunReflection.Descriptor, global::Google.Protobuf.WellKnownTypes.EmptyReflection.Descriptor, global::Google.Protobuf.WellKnownTypes.FieldMaskReflection.Descriptor, global::Google.Api.ClientReflection.Descriptor, },
+          new pbr::FileDescriptor[] { global::Google.Api.AnnotationsReflection.Descriptor, global::Google.Api.ClientReflection.Descriptor, global::Google.Cloud.WebSecurityScanner.V1.CrawledUrlReflection.Descriptor, global::Google.Cloud.WebSecurityScanner.V1.FindingReflection.Descriptor, global::Google.Cloud.WebSecurityScanner.V1.FindingTypeStatsReflection.Descriptor, global::Google.Cloud.WebSecurityScanner.V1.ScanConfigReflection.Descriptor, global::Google.Cloud.WebSecurityScanner.V1.ScanRunReflection.Descriptor, global::Google.Protobuf.WellKnownTypes.EmptyReflection.Descriptor, global::Google.Protobuf.WellKnownTypes.FieldMaskReflection.Descriptor, },
           new pbr::GeneratedClrTypeInfo(null, null, new pbr::GeneratedClrTypeInfo[] {
             new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.CreateScanConfigRequest), global::Google.Cloud.WebSecurityScanner.V1.CreateScanConfigRequest.Parser, new[]{ "Parent", "ScanConfig" }, null, null, null, null),
             new pbr::GeneratedClrTypeInfo(typeof(global::Google.Cloud.WebSecurityScanner.V1.DeleteScanConfigRequest), global::Google.Cloud.WebSecurityScanner.V1.DeleteScanConfigRequest.Parser, new[]{ "Name" }, null, null, null, null),
diff --git a/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/WebSecurityScannerGrpc.g.cs b/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/WebSecurityScannerGrpc.g.cs
index 5215edb3b223..66ddd378c675 100644
--- a/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/WebSecurityScannerGrpc.g.cs
+++ b/apis/Google.Cloud.WebSecurityScanner.V1/Google.Cloud.WebSecurityScanner.V1/WebSecurityScannerGrpc.g.cs
@@ -3,7 +3,7 @@
 //     source: google/cloud/websecurityscanner/v1/web_security_scanner.proto
 // </auto-generated>
 // Original file comments:
-// Copyright 2020 Google LLC
+// Copyright 2022 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.