How we scan, and how to stop us
Perimeter helps people find weak spots on their own websites. Because anyone can type in an address, we follow strict, public rules.
Our rules
Two levels of checking
Basic checks read only public information. Full checks run only on sites whose ownership has been proven.
Nothing intrusive
No login attempts, password guessing, attack code, form submissions or bypassing of access controls. Ever.
Light on your server
A basic check makes a small number of spaced-out requests and stops immediately on errors.
Details go to owners
Anyone else sees a grade and a summary, never the exact location of a weakness.
Abuse is blocked
Bot checks and per-person limits stop bulk checking of other people’s sites.
Minimal data kept
We store results, not your pages. Unclaimed basic results expire after 24 hours.
Seen us in your logs?
Every request we send names itself.
User-Agent: PerimeterScanner/1.0 (+https://perimeter.beckapps.co/how-we-scan) Source IPs: [publish your scanner's fixed IP ranges here] Abuse: [email protected]
Opt your site out
Tell us your domain and we’ll refuse all future checks of it, including subdomains.
Or block us yourself in robots.txt. We check it before every scan:
User-agent: PerimeterScanner Disallow: /