DNS Verification¶
DNS verification proves that you own a domain before the platform allows scans to run against it. This prevents unauthorised scanning of domains you don't control.
Steps¶
- On the Domains page, click the Verify button next to the unverified domain.
- The verification modal shows a TXT record value unique to your account.
- Log in to your DNS provider (e.g. Cloudflare, Route 53, GoDaddy, Namecheap).
- Create a new TXT record for your domain with the value shown.
- Wait for DNS propagation (typically a few minutes, but can take longer depending on your provider and TTL settings).
- Return to the platform and click Verify Now.
Copying the TXT Record¶
The verification modal displays the record value in a code box. Click the Copy to clipboard button next to it to copy the exact value.
Example DNS Configuration¶
| Record Type | Host / Name | Value |
|---|---|---|
| TXT | @ or your domain |
pentesting-verify=<your-token> |
Note
The exact host field varies by DNS provider. Some use @ for the root, others use the bare domain. Consult your provider's documentation.
Troubleshooting¶
| Issue | Solution |
|---|---|
| Verification fails immediately | DNS changes may take a few minutes to propagate. Wait and try again. |
| Still failing after 30 minutes | Double-check the TXT record value — it must match exactly. Ensure there are no extra spaces or line breaks. |
| Multiple TXT records | Having other TXT records (e.g. SPF, DKIM) is fine. The platform looks for a record matching your specific token. |
Domain Detail Page¶
You can also verify from the Domain Detail page. Click any domain name to view its detail page, which shows:
- The TXT record value and a Copy DNS Record button
- A Verify Now button
- A list of subdomains (if any)
- All scans run against this domain