PentrailScanner in your logs

What you’re seeing

There are two kinds of test, and they behave differently:

• The free scan can be started by anyone for any public website, the way anyone can run an SSL or header checker. It sends about ten ordinary requests to your front page, security.txt and one page that doesn’t exist, plus a few TLS handshakes. It asks for no hidden files and knocks on no ports.
• The deep test runs only after the domain’s owner proves control of it with a DNS record, a file at /.well-known/pentrail-verification.txt or a meta tag. It asks for sensitive paths and connects to common ports. If you see it, someone with access to your DNS or your website authorized it.

Both are non-destructive: no exploitation, no password guessing, no load.

Didn’t expect it?

If you see deep-test traffic you didn’t authorize, check who can change your DNS and your web root, because that’s the proof we required. Then write to security@pentrail.thetowers.ai with the time and your domain and we’ll tell you what we have.

Opting out of free scans

Email us your domain and we’ll refuse free scans of it.