Manage Targets
Target Verification
Target Verification in ZeroThreat ensures only authorized users can initiate security scans on a given target. It checks domain ownership or access permissions through methods like file upload, DNS record, or token injection. Successful verification confirms scan readiness and helps prevent unauthorized or accidental scanning attempts.
By verifying your Target, you confirm that you have the authority to assess the target website, preventing the risk of abuse.
To verify your Target in ZeroThreat, follow these steps:
- Go to the Tagrets
Section. - Locate the Target you want to verify and click the Verify Now
button.
ZeroThreat provides two methods for domain verification:
Method 1: HTML File Deployment
- Download the verification file: ZeroThreat will generate a unique
zero-threat.html
file for your domain. - Upload the file to the root directory of your web application.
- Example path:
https://yourdomain.com/zero-threat.html
- Verify file accessibility by visiting the provided URL(e.g.,
https://vulnerable.zerothreat.ai/zero-threat.html
).
Ensure the correct placement
When using HTML file verification, place the file in the root directory, not in a subfolder.
Method 2: DNS TXT Record Entry
- Copy the TXT record provided by ZeroThreat.
- Log in to your DNS provider (e.g., Cloudflare, GoDaddy, AWS Route 53).
- Navigate to the DNS settings for your domain.
- Add a new TXT record with the copied verification value.
- Save the changes (reflecting the change may take a few minutes).
Allow time for DNS propagation
Some DNS providers take longer to update, so TXT record verification might not be instant.
- After completing either of the above methods, return to ZeroThreat and click the Verify button.
- ZeroThreat will check and validate your domain ownership.
- Once verification is successful, the target will be marked as Verified
, allowing you to proceed with scanning.
Now that your target is verified, learn about Target Configuration!