TitanScan Pro runs a defined set of automated, read-only checks against publicly reachable websites, covering security, SEO, accessibility, GDPR and cookies, webshop essentials and company details. To do that it makes DNS lookups, inspects the TLS certificate, sends standard HTTP GET and HEAD requests, reads headers, cookies and public files such as robots.txt, sitemap.xml and security.txt, and crawls a small part of the same site (at most 20 pages, 2 requests at a time).
For the accessibility and privacy checks it opens the home page once in a headless browser, the way a visitor would, without clicking anything or accepting a cookie banner. Every request that browser makes goes through the same scanner, GET and HEAD only. The company check also reads public domain registration data (RDAP).
It never logs in, submits a form, guesses a password, or sends any request designed to change or disrupt a website. Requests identify themselves with the User-Agent TitanScanSecurityScanner/1.0 (+https://titanscanpro.com/security).
If you run a website and want it excluded from scanning, or want to report abuse, email support@titanscanpro.com.
This score reflects the checks performed and is not a guarantee that a website is free from vulnerabilities.