Verifying Website Ownership
This document is for:
Invicti Enterprise On-Demand
When you add a new website to Invicti Enterprise, you need to verify its ownership.
This verification is critical because you must not scan a website without proper authorization from the owner.
- Scanning a website without this authorization is against the law.
- Invicti is not responsible for such actions and cannot be held responsible for potential damage to the target website.
To verify your ownership, you can use one of a number of verification methods listed:
- HTML File Upload Verification
- Meta Tag Verification
- TXT Record in DNS Verification
- Email Verification (simplest method)
If you have a large number of websites or you are unable to use any of the verification methods listed, contact us on [email protected] so that we can allowlist your account.
You need to have access to the website for this verification method.
For further information, see Adding a Website in Invicti Enterprise and Importing Websites in Invicti Enterprise.
How to Verify Ownership of a Website by HTML File Upload
- From the main menu, click Websites, then Websites.
- Next to the relevant website, click Edit. The Edit Website window is displayed.
- Click Verify. The Verify Ownership window is displayed.
- By default, the File Upload method is displayed.
- Click Download your verification file. The Save dialog is displayed. Select a Save location, then upload it to the root folder of your website.
- Click Verify that is correctly set up to see if the file has been uploaded correctly.
- Click Verify.
- The URL field in the Edit Website window displays a green Verified button, and you are authorized to scan that website.
How to Verify Ownership of a Website by Meta Tag
- From the main menu, click Websites, then Websites.
- Next to the relevant website, click Edit. The Edit Website window is displayed.
- Click Verify. The Verify Ownership window is displayed.
- Select the Alternate Methods tab.
- Choose HTML tag.
- Copy the meta tag text from the field and paste it into the
<head>tags in the website’s home page.
- Click Verify.
- The URL field in the Edit Website window displays a green Verified button, meaning you are now authorized to scan that website.
How to Verify Ownership of a Website by TXT Record in DNS
- From the main menu, click Websites, then Websites.
- Next to the relevant website, click Edit. The Edit Website window is displayed.
- Click Verify. The Verify Ownership window is displayed.
- Click Alternate Methods.
- Choose DNS record.
- To use this DNS verification method you need to be able to add a new record to the domain’s DNS zone. Add a new
TXTrecord in your domain’s zone. The Domain Name and Record (value) for the newTXT DNSrecord are specified in the verification step. - Click Verify.
- The URL field in the Edit Website window displays a green Verified button, and you are authorized to scan that website.