Scanner and opt-out

Every request from the scanner carries this User-Agent:

WatchpostScanner/0.1 (+https://scanradar.site/scanner)

A scan happens because someone entered your URL on scanradar.site, or because a verified owner scheduled it. We will publish a list of scanner IP addresses here when scanning moves to dedicated infrastructure.

• A few dozen GET/HEAD requests per scan: your homepage, its scripts and a short list of well-known paths
• A TLS handshake and public DNS lookups
• No form submissions, login attempts, brute forcing or exploit payloads
• Results for a host are reused for 24 hours, so repeated scans don't repeat the traffic
• Active checks run only for domains whose owner has verified them

Email [email protected] from an address at your domain, or from the contact listed in its WHOIS or security.txt, with the domains to exclude. We will block them from all future scans within two business days and confirm by email.

Found a security issue in Watchpost itself? Email [email protected]. We acknowledge reports within three business days and do not take legal action against good-faith research that avoids privacy violations and service disruption. Our security.txt lists the same contact.