UnlockSec Security Scanner
This page describes our automated scanner so target hosts can identify our traffic.
Who we are
UnlockSec is an external attack surface management (EASM) platform. We perform authorised, passive and active security scans on behalf of our customers to discover vulnerabilities in their external-facing infrastructure.
Every scan is explicitly authorised by the asset owner before it begins. We do not perform unsolicited scans.
Scanner hostname
scanner1.unlocksec.comAll scanner traffic originates from this hostname. You can verify the reverse DNS of any connection you receive from us.
User-Agent
UnlockSec-Scanner/1.0 (+https://unlocksec.com/scanner)What we scan
- DNS records (DMARC, SPF, DKIM, MX, MTA-STS)
- TLS/SSL certificates
- HTTP security headers
- Exposed services and authentication surfaces
- Subdomain enumeration via certificate transparency logs
- WHOIS and RDAP registration data
We do not perform denial-of-service testing, exploit development, or any scan that could damage or disrupt the target system.
Rate limiting
Our scanner enforces per-target rate limits and respects robots.txt directives. Active checks are throttled to avoid impacting production traffic.
Abuse & opt-out
If you believe you have received scan traffic in error, or would like your infrastructure added to our permanent block list, contact us immediately:
security@unlocksec.comWe respond to abuse reports within 24 hours and will cease scanning immediately upon a verified request.