The monitoring role is read-only, and you decide how much of it to grant. Turn a permission off below and watch what happens to the report: the checks that depended on it move out of the findings and into a list of things we could not look at. They never quietly become a pass.
All View. None of them can change a record.
This report says nothing about these, either way.
Every check ran. This is the only state in which a clean report actually means a clean account, which is the whole reason the section above exists.
A monitor with half the permissions and no honesty about it produces a beautiful report every week. Ours prints the gap on the front page, so “nothing found” means something.
The score is deliberately not a severity-weighted total. We tried that first: any account with real problems lands on zero and stays there, so the week you fix the worst thing in your account, the number does not move. A pass rate rises the moment a check stops failing.
Not as a policy, and not as something we promise to be careful about. It is enforced twice, in places that do not depend on anyone remembering.
A role you create, in your account, that you can read in full before you grant it. View permission on the eleven things listed above. Not Edit, not Create, not Full, anywhere. You can revoke it in a minute without calling us.
Its HTTP client allows GET to any path and POST to exactly one, the query endpoint, which is a POST only because a SQL statement does not fit in a URL. Every other method throws before a socket opens. A token over-permissioned by mistake still cannot change anything.
Snapshots are your account’s contents, so where they live is your decision before the first run, not ours afterwards: your own file cabinet, or our infrastructure in a region you name.
The monitor itself runs outside your account on a schedule, there is nothing to install and no bundle to maintain. What lives inside is the role, and it is the only thing you have to agree to.
Illustrative layout. The frame is drawn generically rather than as a copy of any vendor interface.
Tell us what you are running today and where it is breaking down. Most calls run 20 to 30 minutes and end with a clear next step. We reply within one business day.