Did our scanner contact your server?
Here is what it is, the address it runs from, what it checks and never does, and how to ask us never to scan you.
SkyQon checks how websites, mail servers and other internet-facing services look from the outside: certificates, encryption settings, email security and exposed services. A check reaches your server when one of our customers monitors a domain you host, or when someone runs our free check on a domain. We look only at what any visitor on the internet can see.
What it does
Ordinary connections, the kind a browser or mail server makes.
Certificate and encryption checks
A TLS handshake on the usual HTTPS ports to read the certificate and the protocol versions and ciphers the server accepts. For mail servers, the same over STARTTLS on port 25.
A few public web pages
The home page (for its security headers), /.well-known/security.txt and, for email security, the MTA-STS policy. These requests name themselves: SkyQon-Scanner/1.0, SkyQon-HeaderCheck/1.0 or SkyQon-ExposureScan/1.0, each with a link to this page.
Open-port checks, only with the owner's consent
A short list of ports such as remote desktop and databases is checked only on domains and address ranges a customer has proved they own, after an administrator of that customer recorded consent. We open a connection and close it.
Gentle by design
At most 60 new connections a minute to any one address, and never more than 8 being opened at the same time, however many of our customers check it.
What it never does
It looks. It does not try to get in.
The scanner never logs in, never tries passwords, never sends exploits or attack payloads and never tests for vulnerabilities by attacking them. It does not try to reach anything that is not already open to the public internet.
If you see something from our address that does not match this page, write to [email protected] with the time and your address, and we will look it up in the scanner's connection log.
Ask us never to scan your domain or addresses
Tell us the domain (it covers every subdomain) or the address range. We record it within one business day; from then on every SkyQon check refuses it, for all our customers. You can also write to [email protected].