You saw seleth-scanner in your logs

What we do

We open the site the way a visitor does, then report what is broken: console errors, leaked keys, missing security headers, slow pages, search problems. The person who requested the scan gets the report. We do not store your content — only a summary and masked samples.

What we never do

• We do not exploit anything we find. Every check is designed to prove a problem exists, not to use it.
• We do not create, modify, or delete your data unless the site owner explicitly authorized it and proved ownership first.
• We do not scan continuously. A scan is one pass and it is over in about a minute.

Anything beyond reading requires proof

Passive checks — the ones any visitor performs by loading your page — run freely. Anything more intrusive requires the requester to prove they control the site, by placing a value we generate at a path only an owner can write to. That check runs before every active scan, not once.

How to stop it

Write to abuse@seleth.com with your domain. We block it within one business day and confirm. No account, no form, no justification needed — it is your site.

We do not treat robots.txt as an opt-out, and we would rather say so than imply otherwise: it addresses search crawlers, and a site owner checking their own site should not be blocked by their own file. The email above is the opt-out, and it is honored per domain.

Rate and load

Every scan runs under a request budget and a rate limit. If our traffic ever looks like a load problem on your side, that is a bug on ours — tell us and we will show you the request log for that scan.