Why do you require verification of domain ownership?

Our service performs automated hacker attacks, which means our tests will most likely reveal sensitive information. We take security seriously and want to make sure this information doesn’t end up in the hands of the wrong people. This is why we ask you to verify your domain and confirm that you are allowed to run security tests on it.

You can verify your domain ownership in two different ways: with DNS records (TXT) or by uploading a txt file into the root of your asset. You can remove the DNS record and txt file after you have verified your domain. If none of the verification methods work for you, you can request assisted verification.