Verification help
How to verify your website
We only assess websites you own or are authorised to have tested. There are two ways to prove it. Your personalised values — including your unique token — appear inside your application; this page shows examples.
Method A: Add a DNS TXT record
Suits whoever manages your domain name — often an IT team or domain administrator.
TXT_ai-pentest_ai-pentest.example.co.ukai-pentest-verification=your-unique-token-appears-hereProvider default, or 300 seconds where supported.
Most people edit the main domain (example.co.uk). Choose a subdomain only if it has been delegated to its own DNS zone.
Some providers want just the host part (_ai-pentest) and add .example.co.uk for you. Others want the full name (_ai-pentest.example.co.uk). After saving, the full name should read exactly _ai-pentest.example.co.uk — not _ai-pentest.example.co.uk.example.co.uk.
Your DNS may be managed by a different provider from the company where you bought the domain. Add the record wherever your authoritative DNS is hosted. You don’t need to change nameservers.
- Sign in to Cloudflare and select the domain example.co.uk.
- Go to DNS → Records.
- Select Add record.
- Choose Type: TXT.
- In Name, enter _ai-pentest (Cloudflare adds .example.co.uk automatically).
- In Content, paste: ai-pentest-verification=your-unique-token-appears-here
- Leave TTL as Auto and select Save.
Add a new record only. Don’t edit or replace existing SPF, DKIM, DMARC, MX or other records.
Send these instructions to my IT team
This summary contains no account or status links.
Please add this DNS TXT record so we can verify example.co.uk for an AI Pentest security assessment request: Type: TXT Host/name: _ai-pentest Fully qualified record name: _ai-pentest.example.co.uk Value: ai-pentest-verification=your-unique-token-appears-here TTL: provider default, or 300 seconds where supported Please add it as a new record and don't change any existing records. Help: https://ai-pentest.co.uk/guides
DNS troubleshooting
- DNS managed elsewhere: if your nameservers point to Cloudflare or your web host, add the record there, not at your registrar.
- Duplicate domain suffix: if the record shows as
_ai-pentest.example.co.uk.example.co.uk, your provider added the domain automatically — enter only the short host name. - Relative versus full names: some providers want
_ai-pentest, others the full name. Check the preview your provider shows. - Wrong subdomain: for
app.example.comthe record must be_ai-pentest.app.example.com, not_ai-pentest.example.com. - Value pasted incorrectly: paste the full value including
ai-pentest-verification=, with no extra spaces or quotes added by you. - Expired challenge: challenges expire after a set period. Generate a fresh one from your request page and replace the old value.
- Caching and propagation: changes can take from a few minutes to several hours to appear. We check every five minutes automatically.
Method B: Upload a verification file
Suits website administrators or developers who can add files to the site. You upload the file to your own website — not to us.
ai-pentest-verification-0a1b2c3d4e5f6a7b.txthttps://example.co.uk/ai-pentest-verification-0a1b2c3d4e5f6a7b.txtShow file contents
AI Pentest website verification Service: https://ai-pentest.co.uk Request: AIP-EXAMPLE Hostname: example.co.uk Token: your-unique-token-appears-here
Web root means the folder that serves your website’s home page. Uploading the file there makes it available directly after your domain name. Common examples are public_html, httpdocs or a configured Nginx/Apache document root — the right folder depends on your website and hosting setup.
- Sign in to cPanel and open Files → File Manager.
- Open the document root for example.co.uk (often public_html, or a folder named after the domain).
- Select Upload and choose the downloaded file.
- Open the exact verification URL below to check it.
Advanced: SSH / SCP and curl
Replace the <placeholders>. Confirm the document-root path for the correct website first. sudo is only needed where permissions require it; root login or chmod 777 are never necessary.
scp ./ai-pentest-verification-0a1b2c3d4e5f6a7b.txt <ssh-user>@<server>:~/ ssh <ssh-user>@<server> sudo install -m 0644 ~/ai-pentest-verification-0a1b2c3d4e5f6a7b.txt /actual/site/document-root/ai-pentest-verification-0a1b2c3d4e5f6a7b.txt
Optional check from a terminal:
curl -sS 'https://example.co.uk/ai-pentest-verification-0a1b2c3d4e5f6a7b.txt'
Troubleshooting
- 404 Not Found: the file is in the wrong folder or has been renamed.
- Wrong document root: hosting accounts with several sites have a separate folder per domain.
- Hidden .txt extension: some computers hide extensions, so the file may become “….txt.txt”.
- Permissions: the file must be readable by the web server (0644 is typical).
- HTTPS: the file must load over https:// with a valid certificate.
- Caching/CDN: purge the cache if an old 404 is being served.
- Login protection: password-protected or maintenance-mode sites block the check — use DNS instead.
- Homepage shown instead: single-page apps often return the homepage for unknown addresses; that won’t pass.
Upload not convenient? Switch to DNS verification at any time from your application — you won’t lose anything.