What happens after you sign up
- 1Add one assetA domain, subdomain, IP or API base URL you own.
- 2Prove it is yoursOne DNS TXT record, hosted file or meta tag. Nothing is scanned before this passes.
- 3Get validated findingsEach one labelled by exploitability, with evidence and a fix.
We never scan an asset you have not verified, and the engine is bounded, rate-limited and non-destructive. Read the safety rules or the full agreement.