Saw a TGG check?
Here is the record.
A first check is one unauthenticated HTTPS HEAD request to a website’s root. Its request headers identify TGG and carry an opaque reference. We do not crawl pages, follow redirects or run exploit tests in this baseline.
Requester details stay private.
For new requests accepted under our updated notice, a signed-in company account can identify the requester only after recent two-factor verification and proof of DNS control of the exact hostname. The result contains their verified email, hostname, reference, request time and limited scope.
This does not grant access to their report, findings, account, IP address or commercial records. DNS verification demonstrates control of the TXT record, not legal ownership. Older requests require a private review with TGG.
Find it in the TGG User-Agent notice link or X-TGG-Request-Reference header. This reference is not an access token.
Checking account status…
Sign in with your company email.
Use an email on the website’s domain and complete authenticator setup. Then return to this notice link to add a DNS record. You do not need to request an assessment or run another check.
1. Prepare your DNS proof
Your email selects . Add a subdomain only if the reference is for that exact subdomain.
2. Add the TXT record and identify the requester
Publish this TXT record for the exact hostname in your DNS settings. Keep existing website and mail records. The relative host below assumes your DNS zone is your email domain. If the zone is different, use the full record name and follow your provider’s format.
- Type
- TXT
- Name / host
- Full record name
- Value / content
- TTL
- Auto or 300 seconds
DNS is checked again each time you request identification. You may remove this separate TXT record after you finish.
Verify your authenticator in another tab, then return here →
Private requester record
This identification access is recorded. The requester’s mailbox was verified; their role and permission were not independently established. Keep these details private and contact TGG about any concern.
Questions, an older reference, or no access to DNS? Contact dev@tgg.group with the reference for a private review. Sending a reference alone does not grant identity or report access.