Scanner identity

WebHound IP ranges

How to recognize legitimate WebHound scanner traffic so you can allowlist us with confidence.

Static IP ranges — coming soon

WebHound currently scans from managed cloud infrastructure with dynamic egress addresses, so we do not publish a fixed IP allowlist yet — listing addresses we don't exclusively control would be inaccurate. Dedicated static scanner IP ranges are planned, and this page will publish them the moment they are live.

How to verify WebHound today

Until static IPs are published, the reliable signal is our honest, consistent User-Agent — we never spoof a browser:

WebHoundScanner/1.0 (+https://webhoundsecurity.com/scanner)

A machine-readable identity document is served at /scanner/identity on our API.