Scheduled monitoring

Watch the checkout page while you are away.

The monitor re-runs the Payment guard check on a schedule, compares it with the baseline you approved, keeps the history and tells you by email, Slack or webhook when a script, its content or a security header changes. You can also schedule a full-site scan (at most every 6 hours): the first scan is recorded as the findings you already know, and you are alerted when a new one appears and is confirmed by a re-scan.

Not available on this hosted copy

This copy of SecureScan runs on free serverless hosting. Each request gets a fresh instance with no disk that lasts and no process that keeps running, so a scheduler and a history cannot live here. The monitor itself is built; it needs a machine that stays on.

Run it on your own machine

export SECURESCAN_MONITOR=1
export MONITOR_TOKEN="$(openssl rand -hex 24)"
export MONITOR_SLACK_URL="https://hooks.slack.com/services/..."   # or MONITOR_WEBHOOK_URL / MONITOR_DISCORD_URL / MONITOR_SMTP_*
python run.py                      # web app + scheduler
python -m web.monitor test-alert   # check that alerts arrive

No server? Use your repository

The Payment guard page's Automate tab gives a GitHub Actions workflow that checks on a schedule and posts to your Slack or webhook when anything changes.