Admin dashboard admin

Every account and every scan request, grouped by email — registered users and non-registered requesters together. Click a row to see all of that email's requests. Server-side role gate, all access audit-logged.

Approve sends a single-use, email-bound invite code (valid 30 days). Every action is audit-logged.

Distinct source IPs from rate-limit and session activity — the real visitor IP behind Cloudflare, so you can spot new/unfamiliar IPs. Security-only (legitimate interest), short retention.