Verify your domain
Prove you own a website with a DNS TXT record, an HTML meta tag or a verification file, so you can publish a public report and unlock deeper checks.
Anyone can run a passive scan of a public website. Some features are only appropriate for the owner, so Wardzo asks you to prove ownership first. Verification currently unlocks a public report page at /report/yourdomain.com, and, on paid plans, turns on deep checks: backup archives, debug logs and credential files, open directory listings, Supabase Row Level Security and Firebase database rules. Deep checks only read; Supabase tables are checked with a row count, never by downloading rows.
Method 1: DNS TXT record (recommended)
Add a TXT record on the domain itself (for example example.com, not www):
wardzo-verify=YOUR_TOKEN
DNS changes can take a few minutes to propagate.
Method 2: HTML meta tag
Add this to the <head> of your homepage:
<meta name="wardzo-verify" content="YOUR_TOKEN">
Method 3: Verification file
Serve a plain-text file at https://yourdomain.com/.well-known/wardzo-verify.txt containing only your token.
Keep the record or file in place. Removing it may un-verify the domain in the future.
Related
- Getting started with Wardzo
Run your first free scan, create a free account, add your site for weekly monitoring and understand your first report.
- How the Wardzo score works
How Wardzo calculates the overall 0–100 score, the Security, SEO health and Uptime sub-scores, severity weights and letter grades.
- Wardzo MCP server setup for Claude, Cursor, ChatGPT, VS Code and Windsurf
Connect the Wardzo MCP server to Claude, Cursor, ChatGPT, VS Code, Windsurf or Codex in one minute so your AI assistant can scan, explain and fix website issues.