Automated Scheduled Scans & Security Regression Alerts

The Problem of Configuration Drift#

A website may achieve a perfect 100/100 security score today, but configuration drift can degrade that posture overnight:

• An engineer modifies an Nginx reverse-proxy configuration and accidentally removes the Strict-Transport-Security header.
• A TLS certificate renewal cron job fails silently, leaving a certificate with only 48 hours of validity.
• A marketing team alters DNS records to integrate a new mailing service and overwrites your DMARC or SPF policy.

SiteSecura solves this through Automated Continuous Monitoring.

---

Scan Frequencies and Tier Allocation#

Scheduled scans run as background jobs managed by our Celery task worker pipeline:

---

Automated Alert Triggers#

SiteSecura monitors two primary threat conditions across all registered domains:

1. SSL/TLS Certificate Expiration Alerts#

Certificate outages cause severe browser warning screens and immediately destroy user trust. SiteSecura sends automated warning notifications at three critical thresholds:

• 30-Day Warning: First proactive notification advising your team to verify automated renewal hooks (e.g. Certbot, AWS ACM).
• 14-Day Warning: Escalated notification indicating renewal has not completed.
• 7-Day Urgent Alert: High-priority alert sent to all workspace administrators.

2. Security Score Drop & Regression Notifications#

Whenever a scheduled audit runs, the engine compares the newly computed score against your domain's historical baseline:

• If a new Critical or High finding is discovered (e.g., an HSTS header disappeared, or TLS 1.0 was enabled), SiteSecura triggers an immediate Security Regression Notification.
• The email notification itemizes the exact delta, explaining which header or setting changed and providing actionable remediation steps.

---

Configuring Notification Preferences#

To configure notification settings for your workspace:

1. Log in to your SiteSecura dashboard and select Settings > Notifications.
2. Set your primary security alert email address (or distribution list).
3. Toggle alert thresholds:
   • Notify on any score decrease (recommended for staging and mission-critical production).
   • Notify only on Critical/High severity changes.
4. Click Save Alert Preferences.