Skip to main content

Scheduled scans

Scheduled scans let you configure recurring assessment cadences on a project. You set a schedule and AISafe creates and runs assessments at the configured intervals.

Why schedule scans​

Codebases change. New dependencies appear, new endpoints open, and patterns that were safe become vulnerable through upstream changes. Scheduled scans catch this drift before it becomes an incident, so your security posture stays accurate over time.

Scheduled scans differ from monitoring: monitoring re-validates known findings, while a scheduled scan runs a full assessment that hunts for new vulnerabilities.

Configure a schedule​

You configure schedules on the project's settings page. Each schedule entry specifies:

  • Cadence: how often the scan runs (daily, weekly, monthly, or a custom interval).
  • Assessment type: code audit or pentest.
  • Source revision/ref: which branch or ref to scan (for code audits).

AISafe materializes each due occurrence and creates a normal assessment. Each scheduled assessment runs like any other: it loads context from the project's living knowledge base, produces findings, and reports on completion.

For step-by-step instructions, see Guide: Set up scheduled scans.