A vulnerability in TasScan itself
Read the Responsible Disclosure Policy first, then email the address listed on the security page and in our security.txt. Please do not access, modify or exfiltrate data that is not yours, use test accounts, and do not run denial-of-service tests or high-volume automated scanners against production.
Scanner abuse
If you believe TasScan traffic reached a system you own without your permission, contact us right away through the security channel above, with the time, your server's address and the User-Agent you saw. We will investigate and can block an asset. See What our scans do and never do for what normal scanner traffic looks like.
Do not want to be checked?
Domain owners can opt out of the anonymous free check with a DNS record. See What the free security check does.