Why do you require verification of domain ownership?

Our service performs automated hacker attacks, which means our tests will most likely reveal sensitive information. We take security seriously and want to make sure this information doesn’t end up in the hands of the wrong people. This is why we ask you to verify your domain and confirm that you are allowed to run security tests on it.

You can verify your domain ownership in five different ways: with Google Analytics, DNS records (txt), DNS records (CNAME), txt file or meta tag. You can remove the meta tag or txt record after you have verified your domain. If none of the verification methods work for you, you can request assisted verification.