Domain Verification

To prevent abuse, we require proof that you own the domains included in the pentest scope.

By configuring one of the verification methods below, Aikido can confirm that you own the domain and are authorized to pentest the application.

Verification methods

We support the following domain verification methods:

• CNAME record: add the CNAME record provided by Aikido to your DNS configuration

• TXT record: add the TXT record provided by Aikido to your DNS configuration

• File upload: upload the verification file to your application or website

These can be set up as part of the onboarding flow while configuring the pentest:

Platform-specific instructions

Detailed instructions are available for:

• Supabase: Supabase