# Scanning policy

Last reviewed: 2026-09-30
Owner: platform-security

## Scope
Automated scanning of ingest-tier hosts is permitted during the maintenance window.
Rate limits apply; see the runbooks directory.
