Opt out of scanning

What this does

Two things, and you choose which. Blocklisting refuses every future scan of your domain - the block covers subdomains and applies to every plan and to the public scanner, so it also refuses paying customers who name your domain. Erasure deletes the scans we already stored: screenshots, findings and generated reports. Scans from the public free scanner go at once. Scans in a customer's workspace go 7 days later, after we have told that workspace's owners; a repeated request within 90 days of a cancelled one is reviewed by a person first.

Why we ask for a DNS record

Publishing the TXT record proves control of the domain: only someone who can edit its DNS can put it there. Without that proof, this form would let anyone block a competitor - or a domain somebody else legitimately owns and is entitled to audit. Nothing is stored while you verify; the record is checked at the moment you confirm.

The self-service alternative

If you run the site's web server, robots.txt works without us and takes effect from our very next request:

User-agent: WebAuditOSBot
Disallow: /

We read the product token WebAuditOSBot, and a rule naming us beats a permissive wildcard group. How our crawler behaves explains the rest of the crawl conduct.

Changing your mind

Removal from the do-not-scan list is not self-service: write to [email protected] from an address on the domain and we take the block off by hand.