Allowlist our scanner

If your site sits behind a WAF, firewall, or rate limiter, our scanner may be blocked or throttled before it can finish — which shows up as missing or incomplete results. Allow our traffic and you’ll get a complete, accurate scan. There are two ways to identify us.

1. By User-Agent

Every request our scanner makes carries a User-Agent that begins with CyberReport- — for example CyberReport-Ownership-Probe/1.0 and CyberReport-Pre-Scan-Probe/1.0. Allowlisting by User-Agent works everywhere and needs no coordination on our side, so it’s the method we recommend for most customers.

2. By source IP

We’re finalising a stable set of egress IP addresses and will publish them here once they’re fixed. Until then, please allowlist by User-Agent (above) — it’s the reliable method today.

We deliberately don’t advertise an IP we can’t guarantee: if you allowlisted a value that later rotated, your firewall would start silently blocking us. When the list is final it will appear right here on this page.

Rate & volume

Our scans are deliberately gentle — outbound requests are rate-limited per target, so allowing us through won’t translate into a traffic spike that hurts your site.

Questions?

If you need to coordinate a scan window or have a stricter network policy, email us at [email protected].