About our scanner

Scopulars NETA is a security scanning service. Its customers use it to check systems they have proven they control: open ports, web security headers, TLS settings and known vulnerabilities. Every scan is started by a customer for a target in their own account.

HTTP and HTTPS requests from the scanner carry this User-Agent header:

ScopularsNETA-Scanner/1.0 (+https://www.scopulars.net/.well-known/security.txt)

Port checks (including service detection) and ping do not carry this header. The scan traffic comes from our servers in AWS Europe (Stockholm), eu-north-1. We do not list the address here; to confirm whether an address belongs to us, write to the address below.

• A customer can only scan a domain or IP address after proving control of it: a DNS TXT record for a domain, or a file served from the IP address itself.
• Proof is not permanent. It must be renewed every 30 days for an IP address and every 90 days for a domain. Lapsed proof is detected by a daily check, and scanning is then refused until the customer proves control again.
• Active scanning is a separate opt-in for each verified asset. Subdomains are included only when the customer explicitly extends the scope to them.
• A name that points (by CNAME) to another provider's infrastructure is not actively tested (no vulnerability templates, API, GraphQL, SSH or vulnerability confirmation checks): the customer's proof does not cover the provider. Only HTTP header and TLS configuration checks are made.
• Private and internal address ranges are never scanned.

If you believe your systems were scanned without your permission, write to:

Please include the source IP address, the date and time with your time zone, and the address that was scanned. We read every report, stop scanning that was not authorized, and act under our Acceptable Use Policy.

To report a security vulnerability in Scopulars NETA itself, write to security@scopulars.net instead.