Skip to content

Verify a domain

Vercatus analyses sites at their owner’s request. Before a domain can be crawled in production, someone in your workspace proves control of it once. This protects site owners from being crawled without consent and protects you from a colleague accidentally running analysis on the wrong company.

  1. In Sites, add the domain. Vercatus shows a verification token.
  2. Publish the token in one of two places:
    • DNS — a TXT record on the host (or its registrable parent): ca-verify=<token>
    • HTML — a tag in the home page’s <head>: <meta name="ca-verify" content="<token>">
  3. Press Verify. DNS changes can take a few minutes to propagate; the check reports which method succeeded.

Verification is per workspace. A domain verified in one workspace does not carry to another.

Single-tenant installs can disable the requirement with REQUIRE_DOMAIN_VERIFICATION=false. The default in multi-tenant mode is on.