The Trustfield scanner

Last updated: 2026

Trustfield performs passive, read-only checks of public pages. It identifies itself with a User-Agent containing Trustfield and a link to this page.

What it does

• Requests public URLs (HTML, JavaScript, headers, robots.txt, security.txt, sitemap and a small set of common exposed-file paths).
• Resolves DNS records for email and TLS trust checks.
• Never attempts login, exploitation, brute force, data extraction or write operations.

What it does not do

• No scanning of pages behind authentication.
• No third-party scanning without the requester confirming ownership or permission.

Opt out

If you want your domain excluded from all Trustfield scans, email info@trustfield.dev from a domain email or with ownership proof. We add it to the block list within one business day.