Can I scan any website, or only sites I own?

Technically the tool works on any public website, but it’s designed for websites you own or manage.

Before scanning a domain for the first time, the app asks you to confirm you have permission to audit it. Once confirmed, that domain is remembered — you won’t be asked again.

The tool only makes standard HTTP requests, the same kind a browser makes, and does not interact with or modify anything on the site.