Security

Where our checks come from

We only ever check domains whose owner has proven control of them, and every check is passive: we request your site the way an ordinary visitor's browser would, and read what you already serve publicly. We do not scan ports, probe for vulnerabilities, submit forms, or attempt to authenticate.

All check traffic comes from these addresses:

• 159.223.183.226

If your WAF or firewall rate-limits unknown clients, allowlist these addresses so checks aren't blocked or throttled. We publish changes here before they take effect.

Our requests identify themselves with this user agent:

securitycanaries-monitor/1.0 (+https://securitycanaries.com/security/)

Reporting a vulnerability

Email networkcanaries@gmail.com with the details. We aim to acknowledge reports within two business days. Please give us a reasonable window to fix an issue before disclosing it publicly.

Machine-readable contact details are at /.well-known/security.txt.