1. Who sends these requests
Hackaiz is a security assessment service operated by HACKTUALIZ Inc. Every request from our scanner identifies itself with the User-Agent “Hackaiz-Security-Scanner/1.0 (+https://hackaiz.com/scanner)”.
2. Why your site is being scanned
A scan is only started by a signed-in person who declared they own the target or are authorized to test it. That declaration is timestamped and kept.
3. What the scanner does — and never does
- By default: read-only requests (GET, HEAD, OPTIONS), at a low pace, with a capped number of requests.
- HTTP probes require exact-domain DNS/file control proof and explicit consent.
- Never deletion, data modification, denial of service or account takeover attempts.
- Operational logs exclude response bodies. Reports may retain protected evidence excerpts.
4. Intervention log
Events are hash-chained and ordinary access cannot modify them. This provides tamper evidence, not an unforgeable proof or independent anchoring. Report evidence and operational events are separate; retention is subject to applicable obligations.
5. Report abuse or block the scanner
If you did not authorize this scan, email contact@hackaiz.com with the date, time and your domain. We find the exact log entry, identify the responsible account and can suspend it. You can also block the User-Agent above.