Domains
Scan settings and cadence
Account-wide scan frequency, per-domain Basic or Standard depth, pausing one domain, and the scan-finished notification.
Updated · 2 min read
Two layers control how and when a domain is scanned: the account's cadence, and each domain's own settings.
Account cadence
Under Settings (web) the scan frequency applies to every watched domain:
| Frequency | Available on |
|---|---|
| Daily (default) | Starter, Pro, Enterprise |
| Every 3 days | Starter, Pro, Enterprise |
| Weekly | Starter, Pro, Enterprise |
| Hourly | Enterprise only |
On Free there is no scheduled domain scan; the frequency setting has nothing to drive except the uptime probe, which runs every five minutes on the three watched domains regardless.
The daily run starts at 06:00 UTC, which is overnight in the United States. Enterprise accounts set to hourly are scanned every hour and placed at the front of the queue.
Per-domain settings
- Web: the domain's edit pane.
- iOS: the domain's page, More, Scan schedule (ScanSettings).
| Setting | What it does |
|---|---|
| Scanning on/off | Turns everything off for this one domain, including the probe and change detection. The domain stays in the inventory |
| Basic or Standard | Basic runs the domain scan alone (DNS, registration, certificate, email records). Standard adds the security checkup, mail monitoring, SEO and the website review |
| Automatic or run it yourself | Whether this domain takes part in the scheduled run |
| Ignore mail | Skips the email authentication checks for a domain that sends no mail, so a missing SPF is not a finding |
| Keep scanning for exposure? | Whether the scheduled vulnerability scan runs on this domain. Off until you answer yes in the setup guide |
ignore_mail and ignore_autoscan are the API field names on PATCH /api/domains/:id and the update_domain tool.
Scan now
Scan now on a domain runs the deep pass regardless of its schedule: the full domain scan, the checkup and the single-page SEO. It counts against the website scan allowance (6 a day on Free). "Go deeper" no longer exists as a separate action; Scan now is the deep pass.
The scan-finished notification
Scan finished is an opt-in push (off by default) that fires when a scan you started completes. Only a complete run notifies; a paused domain or a fully failed run does not. Tapping it opens the Vulnerabilities screen for that domain in the app. Turn it on under Account, Notifications (iOS) or Settings, Alerts (web); the setting is notify_scan_complete.
Scan results by email (notify_scan_results_email, off by default, paid plans) sends the results of a scan by email as well.
Common questions
I set hourly and nothing changed. Hourly needs Enterprise. On other plans the setting is ignored and daily applies.
A domain says "on demand" in its header. It is past the plan's automated allowance. It still scans whenever you press Scan now; only the nightly scan and the probe stop. See What runs automatically.
Keep reading
Related articles
- Scan clearance and ownership proofProve you control one domain on the account (DNS record, file, or an email link) and every domain is cleared for 90 days. Protected targets and authorisation.Vulnerabilities and exposure ·Updated
- Domain health scanWhat the domain scan reads (DNS, nameservers, DNSSEC, the registrar record, expiry) and how the registration expiry notices are timed.Domains ·Updated
- Add your first domainWhat the add-domain sheet turns on by default, what the first scan covers, and how to import a list of domains at once.Getting started ·Updated