Home / Help centre / Troubleshooting
Troubleshooting
Why can't I run a black-box scan on my new target?
A black-box scan cannot start until you prove you own the target, either with a DNS TXT record or by approval from Cyberlop staff. Open the target and read the Ownership verification card. Once it says Verified, black-box scans can run.
Why this happens
Black-box scans test a live URL with no source code, and Cyberlop only runs them against applications you have shown you own. You prove ownership with a DNS TXT record or by approval from Cyberlop staff. Until one of those is done, the target stays blocked for black-box scans. This protects you, and anyone else who shares the host. It also means a stranger cannot point a scan at a site they do not control, which is the point of the check.
How to fix it
- Open the target. Go to Targets and click the target's name.
- Find the card. Scroll to Ownership verification. A target that passed shows a green Verified badge and the line "Black-box scans can run."
- Read the status. If the card does not say Verified yet, follow the instructions on it. You can use a DNS TXT record on your domain, or ask for staff approval.
- Ask for approval if needed. Staff approval comes from Cyberlop. Write to /contact with your target name and we will confirm what to do.
- Scan again. When the card shows Verified, click ▷ Scan on the target or on one of its profile rows.
Still not working?
Only black-box targets carry this card. A white-box target, which has a repository, does not show it. If you cannot see the card at all, read why the Ownership verification card is missing.
The app shows the exact DNS record, so copy it from there. DNS changes can take a while to reach the wider internet, so allow time before you look again. Do not test any site you are not authorised to test.
Related questions
- How do I verify that I own a black-box target?
- Where can I see whether a target's ownership has been verified?
- What are the ways to prove I own a black-box target?
- How do I create a black-box target with no source code?
- Why can't I find the Ownership verification card on my target?
Verify target ownership in Cyberlop: DNS TXT record or staff approval
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Error still showing?
Send us the exact message and the page you were on. We will reply with the fix.