Your own company website
Run the deepest audit on a site you own.
Active security tests only run on domains you have shown you control.
A scan that probes a site can be harmful in the wrong hands, so our deep audit only runs live tests on domains whose ownership you have proved. Add a DNS TXT record or place a small file on your site, tell us to check, and the domain is unlocked for deeper testing. Verification is free.
Run the deepest audit on a site you own.
Verify each client domain once, then test as often as you need.
Show an auditor that you control the domains being tested.
Test environments you own before launch.
Create a free account and enter your domain in the dashboard.
Add the DNS TXT record or the .well-known file we give you.
Click check. The domain is unlocked for deep audits.
Create a free account and verify your first domain from the dashboard.
Domain verification is free.
POST /v1/domains/verify/start, authenticated with your X-IdentifyOrg-Key header.
{
"domain": "example.com"
}{
"id": "dom_01hxyz...",
"domain": "example.com",
"token": "3a810d5fe095e8f16555177ab14b8c29",
"dns_txt": {
"record": "_identifyorg-verify.example.com",
"type": "TXT",
"value": "3a810d5fe095e8f16555177ab14b8c29"
},
"well_known_file": {
"path": "/.well-known/identifyorg-verify.txt",
"url": "https://example.com/.well-known/identifyorg-verify.txt",
"content": "3a810d5fe095e8f16555177ab14b8c29"
}
}When the test convinces you, the developer section shows exactly how to connect it: the endpoint, the request and response, SDKs for your language and webhooks.
Deep audits include active tests. We only run them on sites whose owner has proved they control them.
Add a DNS TXT record, or upload a file under .well-known on your website, then ask us to check.
No. Verification is free.
You can run the standard website audit on any URL, but the deep tests are limited to verified domains.