Verified Domain Report
A more controlled report workflow for domain operators. Ownership of DNS is independently checked before the private beta produces DNS and email-policy observations. It is not a penetration test or full website security assessment.
Current product status
Checking availability…
Domain verification does not constitute authorization to perform intrusive testing. The beta uses public DNS only, from a fixed recursive resolver.
Proposed one-time enhanced report
$4.99
Checkout not open. The paid report remains prelaunch until provider permissions, verified payment handling, accurate report delivery, and refund support are complete.
Ask to be notified1. Request a DNS ownership challenge
Use a public domain whose DNS you can manage. Hosted subdomains such as *.pages.dev may not permit publishing verification records through your DNS account; use a custom domain you control.
2. Verify DNS control
After requesting a challenge, add this TXT record in the authoritative DNS account, allow time for propagation, then select Verify. The proof expires after 24 hours.
Never post the access token publicly. Copy it if you need to resume manually; this page does not store it permanently.
Resume an existing DNS challenge
If DNS changes took time, reopen this page and enter the report reference and access token that you saved. The token is not sent to third parties or stored in this browser. Challenges expire after 24 hours.
3. Generate the owner-verified report
This preview includes public DNS and bounded SPF/DMARC heuristics; it does not contain TLS certificate scanning, server-header fetching, vulnerability testing or paid services.
Request a challenge to begin, if the beta is enabled.
No owner-verified report has been created.
4. Retrieve a purchased report
Prelaunch: Purchases are not open. When the verified paid service is activated, customers can recover a previously purchased DNS and email-policy report using the same private reference and access token. The server rejects unpaid, expired, or refunded entitlements. This is not a general website vulnerability scan.
No paid report requested. The sales checkout is closed.
Our safety and privacy boundaries
Verification tokens are short-lived and the service rate-limits public requests. Only proof hashes, the domain, reference ID, and minimal order state are kept for this beta; no payment card data is stored. The preview only looks up public DNS through a fixed resolver. An ownership check cannot guarantee an entire website or business is secure.
We do not use third-party SSL testing APIs in the paid product without explicit commercial permission. Active security reviews, where offered later, will require a separate written scope and authorization, with applicable laws, provider terms, and insurance reviewed.
Return to free website checks · Build a free header-policy template · Request professional help