Adding and Verifying Domain Targets in SiteSecura

Why Domain Verification Matters#

While anyone can run an ad-hoc public perimeter scan from the SiteSecura homepage, registering a domain within an authenticated workspace unlocks persistent capabilities:

• Automated Scheduled Audits: Weekly or daily background scans to catch regressions.
• Historical Drift Tracking: Comparative charts showing score changes over time.
• SSL Certificate Expiration Alerts: Automated early warning notifications 30, 14, and 7 days prior to certificate expiry.
• Executive PDF Reports: Downloadable white-label audit exports for executive leadership and compliance auditors.

To ensure that scheduled background monitoring and domain alert routing are authorized by legitimate asset owners, SiteSecura requires Domain Ownership Verification.

---

Supported Verification Methods#

SiteSecura supports three standard ownership verification workflows:

Method 1: DNS TXT Record (Recommended)#

This is the most reliable method for enterprise infrastructure, CDNs, and multi-region deployments.

1. In your SiteSecura dashboard, navigate to Domains > Add Domain.
2. Enter your domain name (e.g. example.com).
3. The dashboard generates a unique cryptographic verification token:

   sitesecura-site-verification=sec_vfy_9a8b7c6d5e4f3a2b1c
   

4. Open your DNS provider (e.g., Cloudflare, Route 53, Namecheap, GoDaddy).
5. Add a new TXT record at the root apex (@) or subdomain:
   • Type: TXT
   • Name / Host: @ (or your specific subdomain)
   • Value: sitesecura-site-verification=sec_vfy_9a8b7c6d5e4f3a2b1c
   • TTL: Auto or 300
6. Return to SiteSecura and click Verify DNS Record.

Method 2: HTML Meta Tag#

For content management systems (WordPress, Shopify, Webflow) where editing DNS records is restricted:

1. Copy the generated HTML verification meta tag:

   HTML
   Copy
   <meta name="sitesecura-verification" content="sec_vfy_9a8b7c6d5e4f3a2b1c" />

2. Paste the tag into the <head> section of your homepage.
3. Save and publish your website changes.
4. Click Verify Meta Tag in the SiteSecura dashboard.

Method 3: Well-Known File Upload#

For static sites or custom application servers:

1. Create a plain-text file named sitesecura-verification.txt containing your verification token.
2. Upload the file to your root web server under:

   https://example.com/.well-known/sitesecura-verification.txt
   

3. Verify that the file returns an HTTP 200 OK status code over HTTPS.
4. Click Verify File in the SiteSecura dashboard.

---

Managing Multi-Tenant Workspaces#

In SiteSecura, domains belong to specific Workspaces:

• Personal Workspaces: Best for single founders or small teams managing up to 5 properties.
• Agency Workspaces: Provide client grouping, custom branded PDF reports, and role-based access control (RBAC) across multiple team members.