Why we ask you to verify the domain
Domain ownership
Auditly runs active tests — it attempts injections, checks login rate limits, and looks for secrets in client-side code. That's sensitive to touch, so we confirm first that whoever requests the scan controls the domain.
ADNS TXT record
Add this value as a TXT record on the domain you want scanned. You can remove it once verification is confirmed.
auditly-verify=7f3a2c9e1b8d4056
BFile at your site's root
No access to DNS? Upload a text file with the same value to your site's root.
example.com/auditly-verify.txt
We don't accept WHOIS as proof: since WHOIS privacy is the default at most registrars, the registrant's contact details are almost always hidden or redacted — it no longer reliably identifies who actually controls a domain. If neither method fits your case, write to us and we'll review it manually.