About the CogniGlide Security Checkup scanner

If you found this page in your web server logs, a user of the CogniGlide Security Checkup asked for a public security grade for your domain. This page explains exactly what that involves and how to reach us.

How to recognize it

Every web request our scanner sends uses this User-Agent:

CogniGlideSecurityCheckup/1.0 (+https://security-checkup-cogniglide.netlify.app/scanner)

What the scan does (passive checks only)

• Public DNS lookups through public DNS resolvers: SPF, DMARC, DKIM (a short list of common selector names), MX, and DNSSEC records.
• One TLS handshake on port 443 to read your website's certificate (the same thing any browser does).
• A normal request for your homepage over http:// and https://, following up to 5 redirects. We read only the response status and headers, then close the connection. We don't download page content.

What it never does

• No port scanning, no vulnerability probing or exploitation.
• No path guessing or crawling, no form submissions, no login attempts.
• No requests to private, internal, or reserved IP addresses, and only ports 80 and 443.

A single check generates roughly a dozen DNS queries and a handful of HTTP(S) requests. Results for a domain are cached for 15 minutes, and every user must sign in with a verified email address. Scans are rate-limited per user and per IP address.

Report abuse or ask to be excluded

If you believe the scanner was misused, or you'd like your domain excluded from future checks, please contact CogniGlide through cogniglide.com, or book a time at our scheduling page. Include the domain and, if you can, the date and time from your logs. Excluded domains (and their subdomains) are refused before any request is made.