Architecture

• Control plane: UI + API (tenant-scoped, can be custom domain)
• Storage: customer S3-compatible bucket (AWS S3 / MinIO / etc.)
• Scanner: enterprise scanner deployed inside customer Kubernetes