Get started with Security
Turn on Security, read the findings and fix what matters first.
1Turn it on
On the project’s overview, choose Turn on Security. Each check runs straight away, then as often as your plan allows (weekly on Free, daily on Pro, every six hours on Team).
2Read the overview
Security shows a score out of 100 and a grade, the checks and when they last ran, and the most serious open findings.
3Fix and confirm
Each finding says how to fix it. After fixing, choose Scan now on the check; the finding resolves when the scan no longer sees it.
4Ignore with a reason
For a false positive or an accepted risk, choose Ignore and say why. It stays ignored through later scans until someone reopens it.
5Domains and email
The domain check looks at every domain in the project: certificates, TLS versions, the redirect to HTTPS, security headers, SPF and DMARC, and CNAMEs left pointing at services that could be taken over.