RLSRadarBot

User agent: RLSRadarBot/0.1 (+https://rlsradar.com/bot; passive check for verified owners)

This bot runs only after the operator of a hostname proves they control it, either with a DNS TXT record or a file at /.well-known/rlsradar-verify.txt. It sends GET requests. It does not post forms, does not sign in, and does not write to your database.

It fetches the public page, linked JavaScript, a short list of well-known paths such as /.env and /.git/config, security headers, and, when those files expose a Supabase or Firebase web config, a single read-only probe of that project. It does not store rows it happens to see.

Requests are paced, capped per scan, and refused for private networks, link-local addresses, and cloud metadata hosts. If you verified a host by mistake, remove the TXT record or the well-known file and email support@rlsradar.com. We will stop new scans for that host.