diff --git a/README.md b/README.md
index 75cd26d..401e453 100644
--- a/README.md
+++ b/README.md
@@ -21,6 +21,8 @@ claude
 
 ```bash
 git clone http://100.120.125.113:3000/pdm/security-tools.git
+cd security-tools
+bash setup.sh
 ```
 
 To clone to a specific path:
@@ -28,3 +30,23 @@ To clone to a specific path:
 ```bash
 git clone http://100.120.125.113:3000/pdm/security-tools.git /path/to/destination
 ```
+
+## Activating on a New VM
+
+After cloning, run `setup.sh` once. It will:
+- Ask for your Telegram bot token and chat ID
+- Register cron jobs to run scans daily at 08:00
+- Send a test Telegram message confirming the VM is active
+- Create a `logs/` folder — logs are kept for 60 days then auto-deleted
+
+## Updating an Existing VM
+
+When changes are pushed to this repo, update any VM by running:
+
+```bash
+cd ~/security-tools
+git pull
+bash setup.sh
+```
+
+`setup.sh` is safe to re-run — it skips steps already completed.