Menu
Docs menu

Run a scan

Prove you own the host

A security scan does not start until the host shows the token issued for that target. The public SEO check does not ask for this.

  1. 01

    Copy the token

    The target page shows the token after you add the host. The free scan shows the same token before Start my free scan.

  2. 02

    Publish it in one place

    Put the token in a DNS TXT record on the domain, or on _routelint-challenge. The other option is a file at /.well-known/routelint-verification.txt whose body is the token.

  3. 03

    Check ownership

    Click Check ownership. The worker refuses the job until that check matches. A local fixture can skip the check only while dogfood mode is on.

The two places the token can live
DNS TXT on app.example.com
or TXT on _routelint-challenge.app.example.com

GET https://app.example.com/.well-known/routelint-verification.txt
body: the token, and nothing else required around it