Home / Help centre / Targets & repositories
Targets & repositories
What are the ways to prove I own a black-box target?
You can prove ownership of a black-box target in two ways: a DNS TXT record on your domain, or approval by Cyberlop staff. Either route unlocks black-box scans, and the target page shows a Verified badge once ownership is confirmed.
The short version
Black-box scans test a live URL, and Cyberlop wants proof that the URL is yours to test before it runs anything against it. The New target dialog names both options: "Ownership: DNS TXT record or Cyberlop staff approval".
How it works in Cyberlop
| Option | How it works | Good when |
|---|---|---|
| DNS TXT record | You add a record to your domain's DNS settings | You control DNS or can ask the person who does |
| Staff approval | Cyberlop staff confirm the target for you | You cannot change DNS or would like help |
After either route, open the target. The Ownership verification card shows a Verified badge. With staff approval the text reads "Ownership confirmed via Cyberlop staff on" and the date, then "Black-box scans can run."
The exact record to add is shown in the app for an unverified target. Our captured pages only showed verified targets, so we do not quote a record here. Never guess at the value, because a wrong record will not verify the target and may confuse a later attempt.
What to do next
Start by creating the black-box target. Then open its page and follow the card, choosing whichever route fits how your team manages its domain. To ask for staff approval, write to /contact with the target name and URL. Only request verification for a site you own or have written permission to test. Read how to verify ownership for the steps, or why white-box targets skip this.
Related questions
- How do I verify that I own a black-box target?
- Where can I see whether a target's ownership has been verified?
- Why can't I run a black-box scan on my new target?
- Do white-box targets need ownership verification?
- How do I create a black-box target with no source code?
Verify target ownership in Cyberlop: DNS TXT record or staff approval
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.