diff --git a/setup.sh b/setup.sh
index 40e86cd..2684c27 100755
--- a/setup.sh
+++ b/setup.sh
@@ -84,3 +84,11 @@ fi
 
 echo ""
 echo "Setup complete. Security scans will run daily at 08:00 on ${HOSTNAME}."
+
+# ── Initial scan ───────────────────────────────────────────────────────────────
+echo ""
+echo "Running initial security scan..."
+bash "$SCRIPT_DIR/npm-security-check.sh" >> "$SCRIPT_DIR/logs/npm-security-check-$(date +%Y%m%d).log" 2>&1 && echo "npm-security-check: done." || echo "npm-security-check: issues found — check Telegram."
+bash "$SCRIPT_DIR/check-nextjs-rce.sh" >> "$SCRIPT_DIR/logs/check-nextjs-rce-$(date +%Y%m%d).log" 2>&1 && echo "check-nextjs-rce: done." || echo "check-nextjs-rce: issues found — check Telegram."
+echo ""
+echo "Initial scan complete. Check Telegram for any alerts."