Scan settings and cadence

Two layers control how and when a domain is scanned: the account's cadence, and each domain's own options.

Daily scan & automatic checks

Every domain's page has a Daily scan & automatic checks card (web: the domain's Overview tab; iPhone: the domain's page). It lists each job that runs by itself, how often, when it last ran and when it runs next, and puts the switch for it on the same row:

Job	What you can choose	Scope
Watch this domain automatically	On or off. Off pauses every job below at once and keeps your choices	This domain
Uptime	On or off. Off stops the five-minute check (from Cloudflare and from our server) for this domain only	This domain
Website Watch	On or off. The daily look at the homepage for changes and signs of a hack	This domain
Security and DNS check	Every hour (Enterprise), day, 3 days or week	Every domain on the account
Subdomains	On or off	This domain
On-page SEO	Every day (Pro and up), week or month, or off	This domain
Vulnerability and open-port scan	On (keep scanning on the schedule) or off (once, when added)	This domain
Impostor domains	Watch on or off (Starter weekly, Pro daily)	This domain
Local search report	Every week, every month, or off. Uses credits	This domain
SEO report email	On or off	Every domain on the account

The SEO scan and subdomain discovery run inside the domain's own morning job, so they refresh with everything else. When the security check is not due that morning (a weekly or every-3-days account), SEO still runs on its own cadence in a catch-up two hours later. A cadence faster than your plan is refused rather than stored.

Uptime and Website Watch are also switches on the add-domain sheet, on by default.

API field names on PATCH /api/domains/:id and the update_domain tool: uptime_monitoring, website_watch, seo_cadence (daily, weekly, monthly, off), subdomain_discovery, exposure_monitoring, lookalike_watch, local_scan_frequency (weekly, monthly, off). GET /api/domains/:id/schedule returns each job with the setting that changes it.

Account cadence

The scan frequency applies to every watched domain. Change it from any domain's Daily scan card, or under Settings, Notifications, Scanning on the web dashboard.

Frequency	Available on
Daily (default)	Starter, Pro, Enterprise
Every 3 days	Starter, Pro, Enterprise
Weekly	Starter, Pro, Enterprise
Hourly	Enterprise only (switch it on yourself; Enterprise starts on daily)

On Free there is no scheduled domain scan; the frequency setting has nothing to drive. The uptime probe runs every five minutes on Free's three oldest domains regardless.

The daily run starts at 06:00 UTC, which is overnight in the United States, and takes accounts in plan order: Enterprise first, then Pro, then Starter. That order is all "priority scanning" means; a scan you start yourself is not moved ahead of anyone. Enterprise accounts that switch to hourly are scanned every hour, up to 50 domains per hourly pass across all hourly accounts.

Per-domain settings

Web: the domain's ⋯ menu, Pause monitoring turns scanning off for that domain; the setup guide on its Overview tab records the mail and exposure answers.
iOS: the domain's page, the ⋯ menu, Scan schedule (it opens Scan settings); Pause monitoring is in the same menu.

Setting	What it does
Frequency: the plan's schedule, or Paused	Paused turns everything off for this one domain, including the probe and change detection, and also refuses Scan now until you resume. The domain stays in the inventory
Basic or Standard	Basic runs the domain scan alone (DNS, registration, certificate, email records). Standard adds the security checkup, mail monitoring, SEO and the website review
Ignore mail	Skips the email authentication checks for a domain that sends no mail, so a missing SPF is not a finding
Keep scanning for exposure?	Whether the scheduled vulnerability scan runs on this domain. Off until you answer yes in the setup guide

ignore_mail and ignore_autoscan are the API field names on PATCH /api/domains/:id and the update_domain tool.

Scan now

Scan now on a domain runs the deep pass regardless of its schedule: the full domain scan, the checkup and the single-page SEO. It counts against the website scan allowance (6 a day on Free). "Go deeper" no longer exists as a separate action; Scan now is the deep pass.

The scan-finished notification

Scan finished is an opt-in push (off by default) that fires when a scan you started completes. Only a complete run notifies; a paused domain or a fully failed run does not. Tapping it opens the Vulnerabilities screen for that domain in the app. Turn it on under Account, Settings, Notifications in the app (the web dashboard has no switch for it); the setting is notify_scan_complete. With the morning summary on, it arrives in the 8 a.m. summary rather than on its own.

Email me scan results (notify_scan_results_email, off by default) also emails the report of a scan you started to your sign-in address. Scheduled scans are never emailed; what they find arrives as alerts.

Common questions

I set hourly and nothing changed. Hourly needs Enterprise. On other plans the option is locked in Settings, and the API refuses it with a 403 ("Hourly scan frequency requires Enterprise plan").

A domain says "Over plan cap" (web) or "on demand" (app). It is past the plan's automated allowance. It still scans whenever you press Scan now; only the scheduled scan and the probe stop. See What runs automatically.