Scans
What a scan reads, how often it runs, and what the health score means.
The free probe: anon key only, and what emptiness means
The free check uses only the public anon key and read-only requests. Here is what it can prove, and why an empty response proves nothing.
Reviewed 2026-08-23Connected scans: six fixed queries over pg_catalog
A connected scan reads pg_catalog views and bucket metadata through six fixed queries, exports them for audit, and never selects your data.
Reviewed 2026-08-23Scan schedules: daily, hourly and 15-minute intervals
How often your projects are scanned on each plan, how due is decided, and how the Scan-now button fits around the schedule.
Reviewed 2026-08-23How the health score is calculated
The health score starts at 100 and loses points per open finding, with saturating penalties. What moves it, and what does not.
Reviewed 2026-08-23CLI reference: rowshield scan and rowshield probe
rowshield scan and rowshield probe: flags, exit codes 0, 1 and 2, and a continuous-integration recipe that tells failures apart.
Reviewed 2026-08-23Live scans: the Scan-now button and the SSE stream
Scan now queues a run immediately and streams progress to the open page over server-sent events. Retried scans emit nothing twice.
Reviewed 2026-08-23