MAGI Scout | Know your external exposure

1. Choose your assessment

Website hostname

Work email

Your mailbox must match the registrable organisation domain. Email access alone does not authorise tests. Only the exact verified hostname will be checked.

How will you prove control?I am authorised to request these checks and to publish the control proof.I accept the listed scope and limits. No exploitation, credential attempts, third-party target probing or intrusive tests are authorised.

One host; no redirects; bounded IPv4 HTTPS requests and DNS queries. Default retention: 90 days, subject to the configured value in your authorisation email. Customer report delivery is off by default. Verification/deletion emails are independent. No automatic marketing enrolment.

2. Verify mailbox and host control

Publish this generated proof at the exact location shown. It authorises no other host.

3. Approve this exact scope

Assessment progress

Reports remain private to authorised operations staff. No customer report link is published. A separate authenticated email report is sent only when enabled.

Delete an assessment

Request a separate deletion code at the original mailbox. Confirmation deletes the assessment and reports, with minimal access/deletion audit retained for 90 days.