Trusto surface scanner
Last updated: October 2026
Trusto runs a security scanner that examines our customers' exposed surface from the outside, as a security researcher would, to produce the product's compliance and security diagnosis. This page explains what it does, where it connects from, and how to reach us.
Only customers' verified domains
The scanner only examines domains the customer has proven to control and expressly authorized in the terms of use, plus the subdomains and addresses derived from them. It never scans a target not tied to an active customer.
How to recognize our scanner
- Egress address (static IP):
- 34.24.205.106
- User-Agent:
- TrustoScanner/1.0 (+https://trusto.com.br/scanner)
All scanner traffic leaves from this address and identifies itself with this User-Agent. If you operate infrastructure for a customer of ours and want to allow the scanner on your firewall or WAF, use these two values.
Good neighbor
The scanner respects conservative rate limits: at most 10 HTTP requests per second per host and 150 port connections per second per address, within agreed windows. It runs at most one port scan per address every 24 hours.
What the scanner never does
- It does not exploit vulnerabilities: it only detects by version, banner, or file presence.
- It does not brute-force, fuzz, or test passwords.
- It does not send test emails or forms, and does not cause denial of service.
- It does not collect personal data from site visitors.
Contact
For questions, removal requests, or abuse reports involving our scanner, write to abuse@trusto.com.br. We respond and, where appropriate, stop the access.