Domain Verification
Verify root-domain ownership before external recording and scanning.
Last updated
Verify root-domain ownership before external recording and scanning.
Use Settings -> Domain Verification to prove ownership of root domains before running external discovery, external attack phases, browser-session recording, or Manual Crawler flows when verification is required.
The guided New Assessment flow also includes a Verify Domain step for the same check.
Open Settings -> Domain Verification.
Select the root domain that needs verification.
Publish the DNS TXT record shown in the challenge.
Click Verify Now.
Wait for the status to change to Verified.
If the DNS challenge expires or needs to be regenerated, use Refresh Challenge and publish the new TXT value before trying again.
Verified
The domain passed ownership verification and can be used for gated external workflows.
Pending
A challenge exists, but the TXT record has not been confirmed yet.
Unverified
No valid ownership proof has been completed for the root domain.
Verification may be required before:
recording browser sessions;
using Manual Crawler;
launching external discovery;
launching external attack phases.
If a flow is blocked, open Settings -> Domain Verification, verify the root domain, then return to the scan or browser-session flow.
Enterprise managers can disable verification enforcement for some deployments. Shared trial environments usually require DNS TXT verification unless Bugbase support grants an exception.
Last updated