Security

Get started with Security

Turn on Security, read the findings and fix what matters first.

1. 1

   Turn it on

   In the project’s settings, switch on Security. Each check runs straight away, then as often as your plan allows (weekly on Free, daily on Pro, every six hours on Team).

2. 2

   Read the overview

   Security shows a score out of 100 and a grade, the checks and when they last ran, and the most serious open findings.

3. 3

   Fix and confirm

   Each finding says how to fix it. After fixing, choose Scan now on the check; the finding resolves when the scan no longer sees it.

4. 4

   Ignore with a reason

   For a false positive or an accepted risk, choose Ignore and say why. It stays ignored through later scans until someone reopens it.

5. 5

   Domains and email

   The domain check looks at every domain in the project: certificates, TLS versions, the redirect to HTTPS, security headers, SPF and DMARC, and CNAMEs left pointing at services that could be taken over.

Still stuck? Email us, or send feedback from inside the app.