Run a scan
Prove you own the host
A security scan does not start until the host shows the token issued for that target. The public SEO check does not ask for this.
- 01
Copy the token
The target page shows the token after you add the host. The free scan shows the same token before Start my free scan.
- 02
Publish it in one place
Put the token in a DNS TXT record on the domain, or on _routelint-challenge. The other option is a file at /.well-known/routelint-verification.txt whose body is the token.
- 03
Check ownership
Click Check ownership. The worker refuses the job until that check matches. A local fixture can skip the check only while dogfood mode is on.
DNS TXT on app.example.com or TXT on _routelint-challenge.app.example.com GET https://app.example.com/.well-known/routelint-verification.txt body: the token, and nothing else required around it
