Verify a domain
Vercatus analyses sites at their owner’s request. Before a domain can be crawled in production, someone in your workspace proves control of it once. This protects site owners from being crawled without consent and protects you from a colleague accidentally running analysis on the wrong company.
- In Sites, add the domain. Vercatus shows a verification token.
- Publish the token in one of two places:
- DNS — a
TXTrecord on the host (or its registrable parent):ca-verify=<token> - HTML — a tag in the home page’s
<head>:<meta name="ca-verify" content="<token>">
- DNS — a
- Press Verify. DNS changes can take a few minutes to propagate; the check reports which method succeeded.
Verification is per workspace. A domain verified in one workspace does not carry to another.
Self-hosted installs
Section titled “Self-hosted installs”Single-tenant installs can disable the requirement with REQUIRE_DOMAIN_VERIFICATION=false. The default
in multi-tenant mode is on.