Verifying Target Ownership
This document is for:
Invicti Enterprise On-Demand
When you add a new target to Invicti Enterprise, you need to verify its ownership.
This verification is critical because you must not scan a target without proper authorization from the owner.
- Scanning a target without this authorization is against the law.
- Invicti is not responsible for such actions and cannot be held responsible for potential damage to the target website.
To verify your ownership, you can use one of a number of verification methods listed:
- HTML File Upload Verification
- Meta Tag Verification
- TXT Record in DNS Verification
- Email Verification (simplest method)
If you have a large number of targets or you are unable to use any of the verification methods listed, contact us on support@invicti.com so that we can allowlist your account.
You need to have access to the target for this verification method.
For further information, see Adding a Target in Invicti Enterprise and Importing Targets in Invicti Enterprise.
How to Verify Ownership of a Website by HTML File Upload
- From the main menu, click Targets, then Targets.
- Next to the relevant target, click Edit. The Edit Target window is displayed.
- Click Verify. The Verify Ownership window is displayed.
- By default, the File Upload method is displayed.
- Click Download your verification file. The Save dialog is displayed. Select a Save location, then upload it to the root folder of your target.
- Click Verify that is correctly set up to see if the file has been uploaded correctly.
- Click Verify.
- The URL field in the Edit Target window displays a green Verified button, and you are authorized to scan that target.
How to Verify Ownership of a Website by Meta Tag
- From the main menu, click Targets, then Targets.
- Next to the relevant target, click Edit. The Edit Target window is displayed.
- Click Verify. The Verify Ownership window is displayed.
- Select the Alternate Methods tab.
- Choose HTML tag.
- Copy the meta tag text from the field and paste it into the
<head>tags in the target’s home page.
- Click Verify.
- The URL field in the Edit Target window displays a green Verified button, meaning you are now authorized to scan that target.
How to Verify Ownership of a Website by TXT Record in DNS
- From the main menu, click Targets, then Targets.
- Next to the relevant target, click Edit. The Edit Target window is displayed.
- Click Verify. The Verify Ownership window is displayed.
- Click Alternate Methods.
- Choose DNS record.
- To use this DNS verification method you need to be able to add a new record to the domain’s DNS zone. Add a new
TXTrecord in your domain’s zone. The Domain Name and Record (value) for the newTXT DNSrecord are specified in the verification step. - Click Verify.
- The URL field in the Edit Target window displays a green Verified button, and you are authorized to scan that target.