Security scanning information & incident reporting
If you have received traffic from our service, it means a verified owner or authorized representative of your network has initiated a security scan. All scans require ownership verification before they can be executed.
All security scans from our platform originate from the following IP addresses. Use this list to verify legitimate scan traffic.
Before any scan is permitted, users must prove ownership or authorization through one of the following methods:
Adding a unique TXT record to the domain's DNS configuration
Adding a unique meta tag to the website's homepage
Uploading a verification file to /.well-known/pentest-verification.txt
If you believe scans were conducted without proper authorization, please contact us immediately.
Please include in your report:
Our scanners identify themselves in HTTP requests with this User-Agent. Traffic claiming to be from our service but using a different User-Agent or originating from IPs not listed above should be treated as suspicious.