Scheduled scans

Scheduled scans let you configure recurring assessment cadences on a project. You set a schedule and AISafe creates and runs assessments at the configured intervals.

Why schedule scans

Codebases change. New dependencies appear, new endpoints open, and patterns that were safe become vulnerable through upstream changes. Scheduled scans catch this drift before it becomes an incident, so your security posture stays accurate over time.

Scheduled scans differ from monitoring: monitoring re-validates known findings, while a scheduled scan runs a full assessment that hunts for new vulnerabilities.

Configure a schedule

You configure schedules on the project's settings page. Each schedule entry specifies:

• Cadence: how often the scan runs (daily, weekly, every two weeks, or monthly).
• Assessment type: an account-specific list loaded from AISafe's current availability rules. During the current workflow migration, scheduled code audit is the available full-assessment type.

AISafe materializes each due occurrence and creates a normal assessment. Each scheduled assessment runs like any other: it loads context from the project's living knowledge base, produces findings, and reports on completion.

Each schedule shows the latest result, time, and a reason when it skipped or failed. If the same type is already running, AISafe skips that occurrence and moves to the next one instead of starting overlapping work.

For step-by-step instructions, see Guide: Set up scheduled scans.