Transparency

Why am I being scanned?

You've probably seen one of our scanners in your logs: ADL-SafetyGradeBot or ContextScoreBot. Here's exactly what they are.

What they are

Either someone asked one of our free tools to look at a URL on your domain, or your domain is part of a small research panel we scan for aggregate industry statistics. In both cases the scanner made a small number of ordinary, unauthenticated web requests, the same kind any visitor's browser makes, to read your public response headers and the content you already serve. It does not log in, tries no exploits, and sends nothing designed to alter or break your site. It does request a handful of well-known paths (like .env or .git) to check whether they are publicly exposed, recording only that they are, never their contents.

How they behave

• They identify themselves with a clear User-Agent linking to this page.
• ContextScoreBot honors robots.txt. The Safety Grade check reads only your already-public surface and isn't gated by robots.txt (a site can't robots.txt away an exposed secret), but it stays identifiable, rate-limited, and honors the opt-out below.
• They are rate-limited per domain, so they can't be pointed at your site to generate a flood of traffic.
• Repeated scans of the same domain are served from a short-lived cache rather than re-fetching you.
• If a scan spots an exposed secret, it records only that one exists, never the value.
• Research-panel scans produce no public page about your site. They feed anonymized, aggregate statistics only, with no domain names, ever.

Opt out

If you'd rather we never scan your domain, tell us here. The exclusion applies immediately, to future scans and to any statistics we publish.

Prefer email? [email protected] works too. You can also block the User-Agents above, and we'll respect the block.

We take the traffic our scanners generate seriously. If something we did looked abusive, tell us; we want to know. These scanners are products of Anchor Data Labs.