Overall platform data flow showing all external sources, internal services, and data consumers.

Detailed sequence of the Tenable.io data import flow — export polling, normalisation, and KPI recalculation.

AppSec scan data flow from assessment config through 56 attack agents to enriched findings in PostgreSQL.

Full request lifecycle for login, JWT issuance, and subsequent authenticated requests with tenant resolution.

Request flow in dedicated deployment mode — DEPLOYMENT_MODE=dedicated bypasses schema switching and uses the public schema.

Request flow in SaaS deployment mode — per-tenant schema isolation via dynamic search_path and TLM lookup.

Outbound webhook delivery with HMAC-SHA256 signing and retry logic, plus real-time SSE scan progress events.

Request validation pipeline — Zod schema checks, JWT auth, role enforcement, tenant resolution, and error responses.